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Section  1.  Summary 

Data  from  military  aircraft  flights  at  29,000  feet,  experimental  flights  at  both  30,000  and  65,000  feet,  and 
UwZtS^Tmdl^^th^  n;n  radiation-hardened  64k  and  256k  static  random  access  memones 
“”4erien«  a  signitan,  soft  upset  rat.  at  aircraft  altitudes  due  to  energettc  neutrons  created  by 

cosmic  ray  interactions  in  the  atmosphere. 

Measured  64k  SRAM  upset  rates  range  from  3E-8  fails/bit-day  (f/bd)  at  30,000  feet  (5V  operating  mode)  to 
5  4E-7  f/bd  at  65  000  feet  (2.5  volt  data  retention  mode).  This  overlaps  with  the  range  o  upset  ta  es  (  . 
to  8.9E  7  f/M)3rned  for  the  same  64k  SRAM  devices  (5V  operating  mode)  m  low  earth  orbrt  on  board 

the  Space  Shuttle. 

A  model  of  the  atmospheric  neutron  environment  and  two  models  for  soft  error  rate  prediction  (Neutron 
CroT  slttn  or  S  ^d  Burst  Generation  Rate  or  'BGR')  are  presented.  The  models  conel^e  wrth 
measuL  upset  rates  over  altitude,  latitude,  device  type,  and  operating  voltage  m  most  cases  to  withm 
than  a  factor  of  two  and,  with  incomplete  data,  to  within  a  factor  of  three. 

It  is  suggested  that  error  detection  and  correction  (EDAC)  circuitry  be  considered  for  all 
L“jSu«ung  lerge  amount,  of  ntmiconductor  memoty.  Reliabdtty  equattous  am  provided  to  help 

designers  evaluate  the  benefits  of  various  soft  error  protection  schemes. 
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Section  2.  Introduction 


Inadequate  experimental  data  exists  on  the  reliability  of  integrated  chcuits  in  the  naturd  radiation  enW 
mentlt  aircraft  altitudes.  This  lack  of  data  on  Single  Event  Upset  (SEU)  severely  limits  aviomcs  defers 
ability  to  incorporate  appropriate  reliability  and  availability  improvement  techmques  in  new  eqmpment 
des  Js  and  operating  procedures.  Future  avionics  systems  will  require  even  hi^j  rehabihty 
while  their  increased  memory  and  logic  capacity  make  them  even  more  susceptible  to  SEU.  It  is  important 
to  be  able  to  understand  and  address  this  problem  now. 


2.1  Background 

Previous  studies  of  soft  error  mechanisms  and  hardening  techniques  by  DoD  and  industry 
marily  on  nuclear  weapons  effects,  space  radiation  effects,  or  the  effects  of  low  level  radiation  (alpha  pri¬ 
des)  emitted  by  microcircuit  packaging  and  process  materials.  To  date,  httle  or  no  work  on  the  ^ffe 
natural  radiation  on  electronics  at  aircraft  altitudes  is  available.  Now,  however,  aviomcs  systems  have  ^own 
in  complexity  to  the  point  where  these  effects  become  important,  ^d  perhaps  cnticd  to  their  °P®”; 

tion.  TTiis  study  provides  the  DoD  community  with  detailed  laboratory  and  field  data  to  pubhcize  this 
problem  and  gain  needed  support  for  further  research. 

2.1.1  Soft  Error  Mechanisms 

'Neutron-induced  SEU'  (NSEU)  is  suspected  to  be  the  predominant  SEU  mechanism  at  aircraft  altitudes 
and  is  the  subject  of  this  study. 

When  a  particle  such  as  a  neutron  undergoes  an  elastic  or  non-elastic  reaction  with  a  silicon  atom  while 
passing  through  the  chip,  a  nuclear  recoil  is  created  (it  may  be  Si,  Mg,  A1  etc  depending  on  the  reaction) 
In  addition  to  the  primary  reaction  product,  which  is  the  nuclear  recoil,  charged  secondanes,  such  as  protom 
and  alpha  particles,  may  also  be  released.  The  recoils  are  the  most  heavily  ionizing  reaction  product,  but  the 
charged  secondary  products  can  also  ionize.  Tlie  net  result  is  bursts  of  charge  created  through  the  passage  of 
the  recoils  and  charged  secondary  products  through  the  silicon.  These  bursts  of  charge  can  onginate  any¬ 
where  within  the  volume  of  a  chip,  causing  soft  fails  if  they  occur  at  a  sensitive  node. 

For  example,  in  a  static  random  access  memory  (SRAM),  the  storage  cells  rely  on  the  poteritial  difference 
between  two  nodes  to  establish  a  logic  'one'  or  logic  'zero',  the  charge  collected  from  a  recod  created  by  a 
neutron  interacting  with  a  sUicon  atom  within  a  sensitive  node  may  be  enough  to  cause  it  to  change  its  logic 
state  and  suffer  a  soft  upset.  A  soft  upset  may  be  distinguished  from  a  hard  f^ure  m  that  no  P^nji^ent 
damage  occurs  to  the  microcircuit.  In  this  case,  the  memory  ccU  can  be  restored  to  its  proper  logic  state  by 

rewriting  it. 

SEUs  can  also  be  caused  by  the  passage  of  heavy  ions  through  a  semiconductor  This,  in  fact,  was  how 
SEU  was  discovered,  through  the  upsets  caused  by  the  heavy  ion  i^rtion  ® 

conductor  devices  in  space  [Ref.  1].  Most  microelectronics  tested  for  susceptibdity  to  SEU  are  tested  with 
hea^  ions  for  space  applications.  As  shown  in  7.4,  "Upset  Rate  by  the  Burst  Generation  Method  on 
pag77-9,  this  heavy  ion  SEU  data  can  also  be  utilized  to  obtain  estimates  of  neutron  mduced  SEU  by  use  of 

the  BGR  methods. 

With  a  heavy  ion  beam,  the  positively  charged  ion  enters  the  silicon  lattice  of  a  microelectronic 
begins  to  lose  energy  by  ionizing  the  atoms  along  its  path.  The  electron-hole  paira  that  are  created  fom 
cyhndrical  column  with  a  net  neutral  charge.  The  column  then  decays  into  a  casc^c  of  earners,  resultmg  m 
one  electron-hole  pair  for  every  3.6  electron  volts  (eV)  of  ener^  lost  by  the  ion.  This  process  occurs  withm 
a  time  of  the  order  of  picoseconds,  and  a  radius  of  about  0. 1  micrometer  (/im). 
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When  an  ion  track  penetrates  an  electric  field,  such  as  the  depletion  region  of  a  P-N  junction,  the  colimm  of 
carriers  drastically  disturbs  the  depletion  layer.  Inside  the  depletion  region,  the  generat^  el^roM  drift  to  a 
more  positive  potential  side,  while  the  generated  holes  drift  to  a  rnore  negative  potential  side.  The  c^er 
drift  process  reduces  the  net  charge  in  the  original  depletion  region  and  causes  the  potential  across  it  to 
rhangR  [Ref.  2].  Additional  carriers  may  also  reach  the  depletion  region  by  diffusion  and  contribute  to  this 

effect. 


2.2  Purpose  of  Study 

The  overall  objective  of  this  project  was  to  improve  the  reliability  and  availability  of  avionics  hardw^  with 
respect  to  their  sensitivity  to  SEU  caused  by  the  natural  radiation  environment  of  the  earth’s  atmosphere. 

Avionics  systems  containing  up  to  several  megawords  of  semiconductor  memory  have  now  reached  the  field 
and,  at  aircraft  altitudes,  are  experiencing  on  the  order  of  one  single  event  upset  (SEU)  per  fli^t.  Ensting 
data  suggested  that  these  SEUs  were  caused  either  directly  or  indirectly  by  cosmic  rays,  in  particular  by  the 
atmospheric  neutrons  generated  by  the  cosmic  rays.  This  was  a  relatively  new  finding  and  little  work  had 
been  done  to  understand/quantify  the  problem  and  develop  appropriate  hardening  strategies. 

Therefore,  the  purpose  of  this  study  was  to  investigate  and  characterize  SEU  effects  and  hardware  strategies 
for  avionics  systems.  To  achieve  this,  the  study  was  divided  into  five  separate  tasks  defined  as  follows; 

1.  Review  IBM  and  Boeing  collected  avionics  field  upset  data  to  demonstrate/quantify  the  problem; 

2.  Perform  laboratory  SEU  testing  of  the  same  microelectronics  that  exhibited  flight  upsets; 

3.  Develop  models  to  correlate  laboratory  test  results  with  existing  data; 

4.  Predict  the  impact  on  current/future  avionics  designs;  and 

5.  Determine  and  recotrunend  hardening  strategies. 

Section  3  through  Section  9  document  the  manner  in  which  these  tasks  were  accomplished. 

The  flight  upset  data  are  described  in  Section  3,  “IBM  Flight  Experimental  Data”  on  page  3-1  and 
Section  4,  “Military  Avionics  Field  Data”  on  page  4-1.  Most  of  the  flight  upsets  recorded  are  for  a  64kxl 
SRAM,  although  there  is  also  a  limited  amount  of  data  for  a  256kxl  SRAM.  As  part  of  this  study,  the 
same  64k  SRAM  was  tested  in  the  laboratory  with  neutron  beams  of  three  different  energies,  as  de^bed  in 
Section  6,  “Laboratory  Testing”  on  page  6-1,  to  obtain  neutron  upset  cross  sections.  Heavy  ion  SEU 
testing  had  been  performed  on  this  64k  SRAM  previously,  and  the  heavy  ion  SEU  cross  section  curve  was 
available. 

Three  models  are  described  in  Section  7,  “Neutron  Upset  Model”  on  page  7-1,  one  to  calculate  the  atmo¬ 
spheric  neutron  flux  and  two  different  models  to  calculate  the  upset  rate  at  aircraft  altitudes.  One  of  these 
upset  models  uses  the  neutron  upset  cross  section  data  and  the  other  uses  the  heavy  ion  SEU  cross  section 
curve  via  the  burst  generation  rate  (BGR)  method.  Section  8,  "Impact  on  Current/Future  Avionics  on 
page  8-1  uses  the  measured  flight  upset  data  to  assess  the  effect  of  upsets  on  current  ^d  future  aviomcs. 
Strategies  to  minimize  SEU  occurrences  are  discussed  in  Section  9,  “Hardening  Strategies  on  page  9-1. 
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Section  3.  IBM  Flight  Experimental  Data 

A  portion  of  this  study  involved  flying  an  experimental  soft  error  measurement  package  on  board  two  types 
of  aircraft  to  record  flight  upsets.  For  these  measurements,  we  used  an  approach  that  had  worked  success¬ 
fully  in  1984  on  the  Cosmic  Ray  Upset  Experiment  (CRUX  III)  flown  on  the  Space  Shuttle  (IBM  project 
5V25)  [Ref.  3].  This  consisted  of  flying  a  large  quantity  of  complementary  metal  oxide  semicondurtor 
(CMOS)  static  RAM  memory  devices.  The  devices  were  programmed  on  the  ground,  flown  m  the  ^ta 
retention  mode  (battery  power),  and  read  out  on  return.  The  actual  flight  upset  data  is  summarized  m  3.6, 
“Data  Analysis”  on  page  3-7. 

All  flights  of  the  experimental  package  contained  a  large  number  of  64k  SRAMs.  The  s^e  64k  SRAM  is 
used  in  the  CC-2E  Digital  Computer  flown  on  the  military  aircraft  that  provides  the  aviomcs  field  upset  data 
described  in  Section  4,  “Military  Avionics  Field  Data”  on  page  4-1.  This  same  64k  SRAM  was  tested  for 
upset  in  the  laboratory  by  exposing  a  number  of  these  SRAMs  to  neutron  beams  of  vanous  energies,  as 
described  in  Section  6,  “Laboratory  Testing”  on  page  6-1. 


3.1  Flight  Experimental  Hardware 

The  test  hardware  consisted  of  the  following: 

•  11  64Kxl  SRAM  boards; 

•  Three  256Kxl  SRAM  boards; 

•  Two  aluminum  flight  containers; 

•  Six  film  pack  holders; 

•  One  tester  interface  card  and  cables;  and 

•  IBM  PC  RS-232  controller  software. 

A  photograph  showing  examples  of  this  hardware  appears  in  Figure  3- 1 . 

The  SRAM  boards  were  adapted  from  the  original  1984  CRUX  III  design  by  T.  Scott  of  IBM  Manassas, 
VA  (IR&D  co-investigator  during  1988).  The  modifications  included  changing  from  hand-wired  circuitry  to 
a  printed  circuit  approach  for  higher  reliability  and  more  devices  per  board. 

Both  the  64K  and  256K  board  types  were  laid  out  identically,  with  28  SRAMs,  seven  3.0-V  alkaline  bat¬ 
teries,  and  one  edge  connector.  The  SRAMs  were  wired  so  that  the  batteries  would  keep  data  “aUve”  for 
several  months,  using  the  vendor’s  data  retention  mode.  All  SRAM  I/O  signals  were  routed  to  the  edge 
connector  so  that  programming  and  readout  could  be  done  simply  by  connecting  a  ribbon  cable  to  the 
external  tester,  without  removing  the  board  from  the  flight  container.  When  the  tester  was  disconnected,  aU 
signal  lines  were  puUed  to  ground  or  3V  with  on-board  resistors  and  a  termination  connector  to  prevent 
electrical  noise  from  disturbing  the  stored  data.  Fuses  also  provided  protection  if  CMOS  latchup  were  to 
occur,  while  diodes  isolated  the  batteries  from  the  external  5V  tester  supply. 

The  11  64K  boards  were  built  using  the  same  64Kxl  CMOS  static  RAM  device  type  that  was  flown  in  the 
1984  CRUX  III  experiment  [Ref.  3].  ITiis  IMS1601S70LM  64Kxl  SRAM  was  manufactured  by  Inmos 
Corporation  using  1.3Mm  effective  channel  lengths  on  a  25.4mm^  N-type  substrate.  It  has  four-tranastor 
N-channel  MOS  (NMOS)  cells  with  a  CMOS  periphery.  Each  cell  has  a  total  area  of  220^m  .  Total 
memory  density  for  all  64K  boards  combined  was  llx28x64K,  or  19.25  megabits. 

The  three  256K  boards  contained  256Kxl  static  RAMs  of  construction  similar  to  the  64K.  These  parts 
were  manufactured  by  Electronic  Designs,  Inc.,  having  a  part  number  of  ED181256P55Q1  and  package 
lot/date  codes  of 'PTS178S  8832.'  The  256K  devices  had  smaller  1.1 /rm  ground  rules,  however,  and  a  twm- 
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well  CMOS  process.  Total  memory  density  was  3x28x256K,  or  21  megabits.  Both  the  64K  and  256K 
SRAMs  had  a  low  power  data  retention  mode  suitable  for  battery  backup. 

Programming  and  readout  was  accomplished  with  a  portable  memory  tester  and  adapter  card/cable.  The 
tester  was  interfaced  to  an  IBM  PC  through  an  RS-232  cable.  Using  IBM  BASIC  controller  software  devel¬ 
oped  by  T.  Scott,  we  were  able  to  program  half  the  boards  with  a  checkerboard  pattern  and  the  other  half 
with  checkerboard  complement.  At  the  end  of  exposure,  the  tester  was  again  used  to  determine  which  chips 
haid  failed.  The  software  was  able  to  determine  the  failed  cell's  physical  locations  on  each  chip,  using 
topological  descrambling,  so  that  we  could  look  for  symptoms  such  as  multiple-bit  errors. 


Figure  3-1.  Photograph  of  Flight  Test  Hardware.  Alkaline  baUeries  were  mounted  directly  on  each  static  RAM 
memory  board  to  provide  up  to  several  months  of  data  retention.  The  memory  boards  were  then 
mounted  in  an  aluminum  container  for  the  test  flights. 


3.2  Ground  Measurements 


In  order  to  determine  the  sea  level  (or  reference)  soft  upset  rate,  21  64Kxl  SRAM  boards  were  used, 
including  ten  that  had  been  built  for  future  CRUX  experiments.  Between  April,  1988  and  J^uary  1989, 
periodic  programming  and  readouts  were  performed  on  the  ground,  with  1 1  soft  upsets  observed  in  1,100,736 
device  hours,  or  a  soft  fail  rate  of  3.7xl0'’  fails/bit-day  (f/bd). 

This  upset  rate  was  later  used  to  estimate  the  proportion  of  soft  fails  occurring  on  the  ground  between  flight 
tests.  It  should  be  noted  that  a  significant  percentage  of  this  ground  upset  rate  may  have  been  due  to  alpha 
particle  emissions  from  internal  package  and  process  materials,  rather  than  from  cosmic  rays.  Upset  caused 
by  alpha  particles  from  microelectronics  packaging  materials  is  a  well  known  phenomenon  [Ref.  4]. 

Also,  in  cooperation  with  the  Nuclear  Engineering  department  of  Rensselaer  Polytechmc  Institute,  we 
obtained  Califomium-252  soft  error  cross-section  measurements  of  the  64Kxl  SRAM.  This  soft  error 
testing  was  done  by  graduate  student  A.  Constantine  in  1988  using  a  0.75  microcurie  source  at  a  distance  of 
0.5cm  in  air  [Ref.  5].  At  5V,  the  soft  error  cross-section  was  found  to  be  about  29fim^  per  bit,  which  com¬ 
pares  very  well  with  a  36/im^  sensitive  region  calculated  in  1984  from  cell  photomicrographs  [Ref.  6]. 
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3.3  Low-Altitude  Measurements 

In  the  summer  of  1988,  ten  64KxI  SRAM  boards  were  flown  on  board  an  E-3  Airborne  Warning  and 
Control  System  (AWACS)  model  JE-3C  aircraft  in  cooperation  with  the  Boemg  Aerospace  Company  m 
Lttle,  wLhington.  A  photograph  of  the  E-3/AWACS  is  shown  in  Figure  3-2; 

shipped  to  D.  Mattson  at  the  IBM  Field  Service  office  near  Boeing  airfield  so  that  he  ^ 

read^t  and  piogiamming  on-location  between  flights.  Support  was  also  provided  by  T.  Scott  of  IBM 

Manassas. 

•n,e  tow  dtitwto  began  on  June  27th  and  ended  on  July  Hod,  1988. 

exposed  to  a  round  trip  commercial  shipping  flight  between  Manassas  and  Seattle  ^  ‘3  ^ 

flints  out  of  Seattle  (59.6  hours),  a  round  trip  E-3  flight  between  Seattle  T^pa,  f  ^ 

and  five  E-3  test  flights  out  of  Tampa  (25.3  hours).  This  represented  a  total  of  about  106  hours  of  ffi^t 
time  at  an  altitude  of  from  26  kft  to  40  kft.  The  Boeing  Co.  provided  a  record  of  the  E-3  ^cr^  s  ^itude 
latitude,  and  longitude  approximately  every  12  minutes  during  flight.  Seattle  was  considered  to  be  at  a 

middle  latitude  (47°  N). 

During  this  time,  there  were  a  total  of  11  soft  fails.  None  of  these  were  in  adjacent 

(multiple-bit).  The  ground  time  of  561  hours  was  assumed  to  have  caused  about  one  of  these  11  f  , 

leaving  a  flijit  upset  rate  of  about  1.2E-7  f/bd.  ITiis  is  about  30  times  higher  than  the  rate  we  observed  at 

sea  level. 


3.4  High-Altitude  Measurements 

Soft  fad  rates  were  also  measured  at  high  altitudes  (19.8km  or  65  kft)  on  board  an  ER-2  research  pl^e  iri 
cooperation  with  the  National  Aeronautics  and  Space  Administration's  (NASA  s)  Ames  Research  Facihty  at 
Moffett  Field,  California.  A  photograph  of  the  ER-2  is  shown  in  Figure  3-3. 
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Figure  3-2.  Photograph  of  E-3  AWACS  Airplane.  Low  altitude  (30  kfl)  SEU  measurements  were  performed  on 
board  a  Boeing  Aerospace  E-3  AWACS  aircraft. 
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cargo  door  during  flights  at  65,000  feet. 


For  these  tests,  the  FLUX  flight  container  was  mounted  inside  the  rear  compartment  door.  NASA  provided 
a  record  of  the  ER-2’s  altitude,  latitude,  longitude,  and  heading  for  each  minute  of  flight.  Many  of  the  data 
readouts  were  performed  on  location  by  C.  McWilliams,  Jr.  of  IBM  San  Jose,  with  support  from  T.  Scott  of 

IBM  Manassas. 


3.4.1  Middle  Latitude 

A  total  of  20  ER-2  flights  were  performed  at  65,000  feet  over  California,  using  the  64K  SRAM  boards. 
During  these  flights,  the  64Kxl  SRAMs  experienced  20  soft  faUs  in  16,875  device  hours.  None  of  these  were 
multiple-bit  fails.  If  we  assume  7.9  of  the  20  soft  fails  occurred  during  the  ground  hours  ^d  cross  country 
commercial  shipping  flights,  then  the  65,000  foot  upset  rate  at  this  middle  latitude  (37  N)  would  be  about 
2.6E-7  f/bd  for  the  64Kxl  SRAM,  or  about  70  times  the  sea  level  upset  rate. 
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3.4.2  High  Laiitude 

We  also  had  the  opportunity  to  fly  the  experiment  at  high  latitudes  when  the  ER-2  was  sent  to  Norway  in 
Jan/Feb  1989  for  the  NASA  Arctic  Ozone  Expedition.  The  soft  fail  rates  at  such  high  latitudes  were 
expected  to  be  significantly  higher,  since  the  Earth's  magnetic  field  provides  less  shielding  of  the  char^  par¬ 
ticle  cosmic  rays.  The  256K  boards  were  ready  then  and  were  included  with  the  64K  boards  for  the  first  and 
only  time  on  these  flights. 

A  total  of  14  flights  were  performed  out  of  Stavenger  Air  Force  Base,  Norway,  flying  m  far  north  “82°^ 
latitude  at  65,000  feet.  When  the  hardware  was  returned,  we  found  a  total  of  57  upsets  in  the  64K  SRAMs 
and  six  upsets  in  the  256K  SRAMs.  Two  of  the  64K  upsets  were  in  physicaUy  adjacent  memory  cells,  radi¬ 
cating  a  possible  multiple-bit  fail  from  a  single  cosmic  ray.  If  we  assume  5.4  of  the  57  upsets  0*^^“ 

64K  SRAMs  during  ground  time  and  commercial  shipping  flights,  then  the  64K  upset  rate  at  65,000  feet  at 
high  latitude  would  be  51.6  fails  per  34,907  device  hours,  or  5.4E-7  f/bd.  'This  is  about  150  times  higher  than 
the  middle  latitude  sea  level  rate. 

'There  was  no  ground  test  data  available  for  the  256K  SRAMs  that  could  be  used  to  subtract  out  the  back¬ 
ground  upsets.  However,  if  we  assume  that  all  fails  occurred  in  the  air  over  Norway,  then  the  *4^^  bound 
for  the  256K  soft  fail  rate  at  high  latitude  would  be  6  fails  per  3,647  device  hours,  or  l.lE-7  f/bd.  'This  upper 
bound  is  still  lower  than  the  64K  upset  rate. 


3.5  Dosimetry 


Sets  of  passive  radiation  detectors  were  also  flown  along  with  the  memory  devices  [Ref.  7].  The  purpose  of 
the  detectors  was  to  provide  a  record  of  the  radiation  environment  for  input  to  our  soft  error  modeling. 

The  flight  detectors  were  configured  as  stacks  in  three  identical  packages.  Since  some  of  the  detectors  had 
directionality  of  response  to  incoming  radiation,  the  three  stacks  were  mounted  in  an  orthogonal  arra^  A 
fourth  stack  remained  on  the  ground  as  a  control.  Each  detector  stack  consisted  of  four  components.  These 
were: 

1.  Nuclear  emulsions; 

2.  Thermoluminescent  detectors  (TLD-200,  CaF2  and  TLD-700,  ^LiF); 

3.  'Thermal  and  epithermal  neutron  detectors  (*LiF  radiators  with  CR-39  PNTD  alpha  particle  detectors 
with  and  without  gadolinium  covers);  and 

4.  CR-39  PNTD  film,  in  pairs. 

The  nuclear  emulsions  recorded  the  tracks  of  protons  down  to  minimum  ionizing  energies.  The  TLDs  gave 
a  measurement  of  total  radiation  dose,  while  the  ‘LiF/CR-39  detectors  used  the  ‘Li(n,alpha)T  reaction  to 
measure  low  energy  neutron  fluence.  The  gadolinium  foils  (25ixm  thick)  had  an  effective  neutron  abOTiptiori 
cutoflT  of  about  0.2eV.  This  allowed  a  separation  of  neutron  re.sponse  into  thermal  (<0.2eV)  and  epithermal 
(0.2eV  to  IMeV)  regions.  Thus,  this  dosimetry  package  did  not  measure  the  energetic  neutrons 
(l<E<1000MeV)  in  the  atmosphere  that  are  discussed  in  detail  in  Section  7,  "Neutron  Upset  Model"  on 
page  7-1  and  are  considered  as  the  major  cause  of  flight  upsets.  The  CR-39  PNTD  pairs  recorded  heavy 
ions  (protons  of  E^IO  MeV  and  ions  of  Z>2  up  to  higher  energies). 

The  film  packs  were  attached  to  the  FLUX  flight  container  on  the  E-3/AWACS  flights,  but  earned  n^  the 
nose  of  the  plane  for  the  ER-2  flights.  They  were  separated  from  the  fli^t  contmner  because  the  ER-2  s 
interior  temperature  near  the  engine  was  found  to  be  too  high  for  the  emulsions  during  runway  taxiing. 

All  detectors  have  been  processed,  and  all  but  the  nuclear  emulsions  have  been  analyzed. 
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Table  3-1.  Dosimetry  Results.  There  was  a  factor  of  four  increase  in  total  dose  equivalent  going 
65,000  feet,  and  a  further  60%  increase  at  polar  latitudes. 

from  30,000  to 

Altitude 

30kft 

65kft 

65kft 

North  Latitude 

39-48° 

32-40° 

59-82° 

Aircraft  Type 

E-3 

ER-2 

ER-2 

TLD  Dose  (mremiday  for  LET  <  SkeVIfim  in  H^O) 

1.5 

8.9 

12.0 

PNTD  Dose  (mremiday  for  LET  >  SkeVIfim  in  H-P) 

Negligible 

Negligible 

2.1 

Neutron  Dose  (mremiday  for  E  <  !  MeV) 

0.83 

0.46 

0.67 

Total  Radiation  Dose  (mremiday) 

2.3 

9.4 

14.8 

The  TLD  doses  were  seen  to  increase  with  both  altitude  and  latitude,  as  shown  in  Table  3-1.  However,  it  is 
not  certain  that  there  would  be  a  significant  latitude  difference  outside  the  polar  regions.  There  wm  a  factor 
of  four  increase  in  total  dose  equivalent  in  going  from  30,000  to  65,000  feet,  and  a  further  60%  increase  at 
polar  latitudes.  In  Norway,  81%  of  the  measured  dose  came  from  radiation  having  a  Linear  Energy  Transfer 
(LET)  of  less  than  SkeV//im  (H2O),  which  would  be  high  energy  protons,  electrons,  gamma  rays,  and  any 
other  lightly  ionizing  particles.  This  fraction  would  increase  to  ateut  95%  for  flights  in  more  southern  lati¬ 
tudes,  where  heavy  particle  fluxes  are  insignificant  [Ref.  7]. 

The  measured  LET  total  flux  spectrum  is  compared  with  three  space  shuttle  measurements  in  Figure  3-4. 
The  three  shuttle  missions,  STS  5 IF,  -51J,  and  -61C,  have  different  orbits  and  encounter  different  heavy 
charged  particle  fluxes,  but  none  of  the  orbits  extend  over  the  polar  regions  [Ref.  7]. 

Cyclotron  tests  [Ref.  8]  have  shown  the  64KxI  SRAM  to  have  a  heavy  ion  LET  upset  threshold  of 
approximately  2  MeVcm^/mg  (200  keV/^xm  in  HjO)  at  5V.  Figure  3-4  shows  that  there  are  about  5E-8 
particles/cm^  sec-steradian  with  this  LET  or  greater  over  Norway.  Using  a  sensitive  area  per  bit  of  29nm 
[Ref.  5],  the  predicted  upset  rate  would  be: 

5E-8  particles/cm^-sec-steradian 
X  lE-8cm^/^m^  x  29;im^/bit 
X  3600sec/hr  x  24hr/day  x  4ir  steradians 

=  1.6E-8  particles/bit-day. 

If  we  then  use  a  scaling  factor  of  3.5x  [Ref.  3]  to  estimate  the  increased  upset  rate  at  battery  voltage,  we 
would  have  a  predicted  upset  rate  of  5.5E-8  f/bd.  This  is  about  one-tenth  the  observed  rate  of  5.4E-7  f/bd. 
As  discussed  in  Section  7,  “Neutron  Upset  Model”  on  page  7-1,  the  remaining  portion  of  the  soft  error  rate 
is  likely  to  be  attributed  to  NSEU. 


3.6  Data  Analysis 

In  order  to  use  the  flight  data,  its  statistical  significance  must  be  considered.  Several  aspects  of  the  exper¬ 
iment  may  have  affected  the  observed  error  rates: 

1.  The  measurement  of  the  number  of  soft  fails  at  time  of  readout  was  considered  exact  (no  inaccuracy); 

2.  The  chance  of  the  same  memory  cell  locations  having  changed  state  more  than  once  was  considered 
negligible  because  of  the  small  number  of  fails; 

3.  The  recording  of  flight  times  was  expected  to  be  accurate  to  within  a  few  minutes  per  flight,  or  about 
1-2%;  and 

4.  The  recording  of  altitude  measurements  was  assumed  to  be  accurate  to  within  about  1000  feet. 
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Figure  3-4.  ER-2/Space  Shuttle  Integral  LET  Spectrums.  ER-2  aircrafi  measuremenU  are  compared  with  crew 
dosimeters  from  three  Space  Shuttle  flights:  5IF  (322x304km,  49.5°),  51J  (SlOkm-max.,  28.5°),  and  61C 
(324km,  28.5°).  For  water,  stopping  power  in  (keV/micron)x(0.01)  =  stopping  power  in  MeV/mg-cm’. 


When  the  above  factors  were  considered,  the  main  uncertainty  in  projecting  soft  fail  rates  versus  altitude  was 
due  to  the  small  number  of  soft  fails  observed  and  their  random  occurrences  in  time. 


Table  3-2.  64K  SRAM  Soft  Error  Results. 

Altitude 

Sea  Level 

mm 

65kft 

65kft 

North  Latitude 

39° 

39-48° 

32-40° 

59-82° 

Aircraft  Type 

- 

E-3 

ER-2 

ER-2 

Mean  Upset  Rate  (measured,  at  battery 
voltage) 

3.7E-9  f/bd 

1.2E-7f/bd 

2.6E-7  f/bd 

5.4E-7  f/bd 
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Section  4.  Military  Avionics  Field  Data 


Flight  tests  of  military  aircraft  equipped  with  a  CC-2E  Digital  computer  wiA 

caiSd  out  over  two  separate  areas  of  Europe  during  the  period  of  November,  1990  through  M^ch  199^ 
From  the  logs  of  these  ffights,  the  status  of  the  five  MMU's  were  determined  Smgle  bit  errois  detect^  by 
the  EDAC  circuitry  were  recorded  in  the  AOCP  and  the  AOCP  log  was  read  to  determme  the  num^  of 

errors  for  each  fli^t  Most  flights  were  about  five  to  six  hours  in  duration.  Most  flights  were  conducted 

an  altitude  of  29,000  feet  to  optimize  the  performance  of  the  on-board  electromcs.  Occasionally,  portions  of 
a  few  flights  were  conducted  at  lower  altitudes. 


4.1  European  Area  1  Flight  Upsete 


Test  flights  of  the  military  aircraft  in  European  Area  1  began  in  November,  1990  We  have  obtained  data 
from  the  first  flight  and  on  subsequent  flights  up  to  February.  1992.  The  first  flight,  the  ferry  fli^t,  was  a 
pol^T  route  from  the  United  States  to  Europe.  One  of  the  two  upsets  on  this  flight 

^d  the  other  over  Iceland.  Most  of  the  subsequent  flights  were  in  European  Area  1  at  a  minimum  latitude 
of  54“N. 

The  duration  of  the  test  flights  varied  from  less  than  two  hours  to  more  th^  nine  hours.  The  average 
time  iZTproximately  6.3  lours  and  more  than  78%  of  the  flights  were  for  more  than  five  hours  T^ 
short  flights  of  between  three  to  four  hours  duration  experienced  upsets,  and  one  Boater 

nine  horns  experienced  no  upsets.  The  largest  number  of  upsets  per  flight  was  five 

One  of  these  flights  was  on  a  north-south  path  that  took  the  aircraft  as  far  south  as  30  N  latitude.  Jne  37 
S^t  tes“  hours  of  flight  time.  Nine  of  the  37,  about  25%.  showed  no  upsets,  cleariy  moating 
thfrandom  nature  of  the  upsets.  The  European  Area  1  flight  upsets  are  shown  m  Fi^re  ‘ 

The  data  for  each  of  the  individual  flights,  in  terms  of  date,  flight  duration,  and  number  of  upsets,  tabu 

lated  in  A.l,  "European  Area  1”  on  page  A-1. 


4.2  European  Area  2  Flight  Upsets 

Test  flights  of  military  aircraft  in  European  Area  2  began  in  March,  1991.  We  have  ‘lata  frorn  that 

first  mZ  and  on  subsequent  flights  up  to  March.  1992.  Most  of  the  ftghts  ^  in  the 

Area  2  at  a  minimum  latitude  of  44“N.  One  recent  flight  was  conducted  considerably  further  south. 

The  duration  of  the  test  flights  ranged  from  about  an  hour  to  more  than  10  hours  with  the  av^a^  fli^t 
length  being  6.6  hours.  More  than  83%  of  the  flights  were  for  more  than  five  hours  dmation.  ^  ®hort  fh  Jt 
of  between^wo  to  three  hours  duration  had  two  upsets  and  several  long  flights  of  tetween  eight  and 

no  upsets.  The  largest  number  of  upsets  per  flight  was  four  and  this  occurred  twice.  TJe 

83  flights  cover  552  hours  of  flight  time.  About  35%  of  the  flights  showed  no 

random  nature  of  the  upsets.  The  European  Area  2  flight  upsets  are  shown  m  Figure  4-1  on  - 

data  for  each  of  the  indbidual  flights,  in  terms  of  date,  flight  duration,  and  number  of  upsets,  is  tabulated  m 

A.2,  “European  Area  2”  on  page  A-2. 
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Military  Aircraft  SEU 

64k  NMOS/CMOS  SRAM,  1560  Devs/System 


Figure  4-1.  CumulaUve  Avionics  Upsets.  The  aircraft  each  contained  1.560  64k  SRAMs. 


4.3  Temporal  Variation  of  Flight  Upsets 

The  flight  upset  data  from  the  miUtary  aircraft  can  be  evaluated  in  sever^  different  ways. 
appears  to  rive  interesting  results  is  to  plot  the  upsets  as  a  function  of  day  as  shown  in  Fi^re  4-2  ^ 
pa^-4.  Individual  upset  points  clearly  show  wide  scatter  about  the  long  term  average  value.  It  would 
ternpting  to  ascribe  some  meaning  to  the  time  variation  of  Figure  4-2.  As  a  fim  test,  we  calculate 
adjusted^  short-term  average  upset  rate,  which  is  indicated  by  the  solid  black  hne.  The  peakmg  m  the  f 
1991  is  seen  in  the  short  term  average  as  well  as  in  the  mdividual  data  pomts. 

The  primary  issue  remains  as  to  whether  this  time  variation  is  at  all  meaningful.  We  ^ve  ^Ws  v^i- 
ation  is  due  to  poor  statistics  and  is  not  meaningful  because  it  is  based  on  too  little  data,  men  a 
experiences  a  sin^e  upset,  one  of  1,560  chips  have  upset,  which  is  0.064%  of  all  chips.  Even  when  there  are 
fom  or  five  upsefs  in  a  flight,  this  represents  only  0.2-0.3%  of  aU  the  chips  upsettmg.  This  is  just  too  few  to 

be  statistically  significant. 

If  we  had  upset  data  averaged  from  a  fleet  of  at  least  10-15  airplanes  in  flight  at  the  same  time,  the  tme 
variation  likely  would  be  statistically  significant.  The  actual  data  m  A.l,  Euro^  Area  1  on  page  A|1 
IS  A  2  Sopean  Area  2”  on  page  A-2  confirm  this.  Most  of  the  highest  daily  ^esjhown  m 

Figure  4-2  occurred  on  days  for  which  we  have  data  from  only  one  of  the  two  fli^t  areas  October  9,  19 
i^Text^on  because  there  is  data  from  both  flight  areas  on  this  day.  In  Area  2,  the  rate  was  0.58 
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uosets/hr  but  in  Area  1  it  was  only  0.15  upsets/hr  and  if  the  two  were  averaged  the  rate  would  be  0^37 
upsels^!  We  believe  that  if  we  had  data  from  another  ten  airplanes  flymg  on  that  « 

rale  for  all  the  aircraft  would  ctely  approach  the  long  tTj^'EffcJrf  I^d”! 

cLriple  ignores  the  variation  with  latitude  which  ts  dtscussed  in  detad  tn  8.3,  Clfect  of  Latitude 

p^  8-3. 

Despite  the  enonnous  statistical  uncertainty  that  we  have  discussed,  if  we  nevertheless  wanted  to  ascrite 
STri^tt^T  the  variation,  what  could  he  the  basis3  ^  teamn  for  t^  — 
then  have  to  be  due  to  a  variation  in  the  atmosphenc  neutron  flux.  As  mdicated  m  4A,  1 

St  Upsets”  on  page  4-1  and  4.2,  "European  Area  2  Flight  Upsets”  on  ^ge  4-1.  the  m  t^ 

sai^  general  geograpWeal  area  and  at  the  same  altitude  most  of  the  time.  T^s  we  wouldn  t  expect  to  sre 
^l^SoriHEe  neutron  flux  due  to  changes  in  altitude  or  latitude.  The  only  remammg  vanable 
cosmic  ray  modulation,  i.e.  changes  in  the  intensity  and/or  spectrum  of  the  mcommg  cosmic  rays  th 
produce  the  atmospheric  neutrons. 

On  earth  we  measure  cosmic  ray  modulation  through  the  response  of  specially  designed  neutron  detertors 
such  as  the  one  at  Deep  River,  Canada.  However,  as  discussed  in  7.2,  “Model  of  the  Atmosphenc  Neutron 
EuAonmeut"  ou  page  7- 1,  large  chauge.  in  the  Deep  River  neutrm  ruumtor  conelate  oiriy 
changes  in  the  1-10  MeV  atmospheric  neutron  flux  based  on  the  Wilson-Nealy  model  (see  .  , 
t  Atmospheric  Neutron  Environment”  on  page  7-1).  Thus  the  wide  fluctuations  seen  ^-2  on 

page  4-4  ^  only  statistical  in  nature,  and  no  physical  mechanism  can  account  for  a  correspondmgly  g 

variation  in  the  atmospheric  neutron  flux. 
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SEU  Temporal  Variation 

64k  NMOS/CMOS  SRAM,  1560  Devs/System 


Figure  4-2.  Avionics  Upset  Rale  vs  Time. 
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Section  5.  Space  Shuttle  Flight  Data 

Additional  SEU  measurements  on  the  same  IMS1601  64kxl  SRAM  used  in  this  a^omcs  study  have  teen 
taken  in  low  earth  orbit  on  board  recent  Space  Shuttle  flights.  This  data  is  included  here  because  it  helps 
corroborate  that  the  soft  errors  we're  seeing  in  the  IMS1601  on  aircr^  are  related  to  the  natural  cosrmc  ray 
environment  and  are  not  due  to  other  effects  such  as  electromagnetic  interference,  etc. 

The  IMS  1601  is  used  for  the  mainstore  memory  in  IBM's  upgraded  AP 10 IS 

(GPC's)  that  have  been  flying  on  board  the  Space  Shuttle  smce  April,  1991.  Each  ^ 

tains  200  of  these  64kxl  SRAMs,  along  with  error  detection  and  correction  circuitry.  In  the  artive  s, 

the  entire  mainstore  memory  is  read  out  every  1.678  seconds  so  that  aU  single-bit  errors  can  be  corrected. 

The  results  of  each  of  these  'scrub'  cycles  are  sent  to  Mission  Control  by  telemetry  and  allow  soft  errors  to 

be  correlated  with  the  time/location  of  the  Shuttle  orbiter  £Ref.  9]. 

5.1  Upset  Rate  Variation  with  Altitude/Latitude 

The  soft  error  rate  as  a  function  of  altitude  and  latitude  for  the  first  eight  flights  of  the  computer  is 

shown  in  Figure  5-1  on  page  5-2.  The  IMS1601  soft  error  rates  range  from  1.4E-7f/bd  at  low 
inclination/altitude  to  8.9E-7fA)d  at  high  inclination/altitude.  'There  was  about  a  2.8x  mcreasc  m  upset  ra  e 
when  going  from  a  28.5“  inclination  orbit  to  a  57.1“  orbit  at  160nmi.  As  a  function  of  altitude,  the  upset 
rate  increased  by  approximately  3.7E-9f/bd  for  every  nautical  mile. 

It  can  be  seen  that  the  upset  rates  measured  on  the  Space  Shuttle  in  low  earth  orbit  are  in  the  sarne  range  as 
those  measured  on  the  ER-2  aircraft  at  65,000  feet  over  Norway.  Thus,  the  problem  of  SEU  can  be  as  great 
a  concern  for  ^raft  avionics  designers  as  for  designers  of  spacecraft  avionics. 
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IMS1601  in  Low  Earth  Orbit 

Space  Shuttle  AP101S  GPC  Mainstore 


Figure  5-1.  Space  Shuttle  SEU  Rate  vs  Allilude/Latitudc.  The  upset  rales  were  measured  on  Ihe  1MS1601  64kxl 
SRAM  in  the  5V  operating  mode. 


5.2  Multi-Bit  Upsets 

The  Space  Shuttle  measurements  also  provide  data  on  multiple-bit  upset  events.  It  is  consistent  whh  the 
much  larger  tabulation  of  multiple-bit  upsets  that  has  been  compUed  from  measurement  on  the  CR  RES 
satellite  [Ref.  10].  These  Space  Shuttle  events  involve  the  simultaneous  (i.e.  within  one  1.678  second  scrub 
cycle)  upset  of  more  than  one  memory  cell. 

Table  5-1  on  page  5-3  shows  of  summary  of  multi-bit  upsets  recorded  on  the  first  eight  flights  of  the 
APIOIS.  In  each  mstance,  the  multiple  upsets  were  in  different  ECC  words,  so  that  all  errors  we«  coriec^ 
table  The  percentage  of  multiple  upset  events  ranged  from  0%  of  the  total  events  on  some  of  the  low 
inclination  flints  (STS-44  and  STS-37)  to  as  high  as  9.0%  of  the  total  events  on  one  high  mchnation  flight 

(STS-42). 
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Table  5-1.  IMS1601  Multi-Bit  Upsets  on  the  Space  Shuttle.  Most  multi-bit  upset  events  have  occurred  at 


high  latitudes. 


Flight 

Altitude 

(nmi) 

Inclina¬ 

tion 

Launch 

Date 

SER 

(f/bd) 

Total 

Events 

Multi-bit 

Events 

Ratio 

(multi/total) 

STS-44  . 

200 

28.5° 

11/24/91 

1.8E-7 

31 

0 

0% 

STS-37 

243 

28.5° 

4/5/91 

3.3E-7 

55 

0 

0% 

STS-43 

160 

28.5° 

8/2/91 

1.4E-7 

39 

1 

2.6% 

STS-49 

198 

28.5° 

5/7/92 

2.0E-7 

58 

2 

3.4% 

STS-45 

165 

57.1° 

5/24/92 

3.9E-7 

77 

3 

3.9% 

STS-48 

292 

57.1° 

9/12/91 

8.9E-7 

151 

10 

6.6% 

STS-39 

140 

57.1° 

4/28/91 

4.1E-7 

81 

7 

8.6% 

STS-42 

163 

57.1° 

1/22/92 

3.9E-7 

67 

6 

9.0% 

Notes: 

1.  The  IMS  1601  SER  is  calculated  based  on  all  upsets,  including  multi-bit  upsets. 

2.  The  STS-43  multi-bit  events  consisted  of  one  2-bit  upset. 

3.  The  STS-49  multi-bit  events  consisted  of  two  2-bit  upsets. 

4.  The  STS-45  multi-bit  events  consisted  of  two  2-bit  and  one  3-bit  upsets. 

5.  The  STS-48  multi-bit  events  consisted  of  ten  2-bit  upsets.  Two  of  these  events  involved 
simultaneous  upsets  in  more  than  one  computer  (GPC  pairs  1&2  and  1&4). 

6.  The  STS-39  multi-bit  events  consisted  of  five  2-bit,  one  4-bit,  and  one  1 1-bit  upsets. 

7.  The  STS-42  multi-bit  events  consisted  of  five  2-bit  and  one  4-bit  upsets. _ _ 

About  80%  (23/29)  of  the  multiple  upset  events  involved  only  two  memory  cells.  However,  one  of  the  29 
events  involved  three  cells,  two  involved  four  cells,  and  one  involved  as  high  as  1 1  cells.  Tins  last  event  (H 
simultaneous  upsets  on  STS-39)  occurred  when  the  orbiter  was  at  the  southernmost  tip  of  its  orbit  and  the 
astronauts  were  viewing  an  aurora  australis  display. 

The  physical  location  of  each  memory  upset  could  only  be  resolved  to  the  card  level,  so  it  is  not  cle^ 
whether  most  upsets  occurred  within  single  chips  or  across  multiple  chips.  In  two  iiistances,  however,  simul¬ 
taneous  upsets  occurred  in  separate  computers  (on  STS-48).  The  IMS  1601  is  a  1-bit  wide  device,  so  a  mul¬ 
tiple  upset  within  the  same  chip  would  cause  only  a  single-bit  error  to  appear  in  any  individual  ECC  word. 

The  Space  Shuttle  multiple-upset  events  are  also  consistent  with  multiple-bit  upsets  recorded  in  SRAMs 
during  heavy  ion  testing.  Koga  [Ref.  11]  found  10-20%  of  multi-bit  upsets  in  two  different  1Mb  SRAMs 
with  the  low  LET  Ne  ion.  We  obtained  substantially  lower  results  with  a  third  1Mb  SRAM,  the  EDI 
188128C54  128kx8  device.  Our  results  are  shown  in  Figure  5-2  on  page  5-4  in  which  the  single  event  md 
multiple-bit  upset  cross  sections  are  plotted  as  a  function  of  the  LET  of  the  ion.  The  SEU  cross  section 
represents  the  average  for  four  different  parts.  For  low  LET  ions  (F  in  our  case,  5.5<LET<1 1),  the  fraction 
of  multiple  bit  upsets  is  only  1-2%,  which  is  about  a  factor  of  ten  lower  than  what  Koga  found. 


Section  5.  Space  Shuttle  Flight  Data  5-3 


Unclassified 


EDI  188128C46CC  128l<x8  CMOS/NMOS  SRAM 
University  of  Washington 


Figure  5-2.  Heavy  Ion  Cross  Section  for  1Mb  SRAM.  Testing  was  performed  at  the  University  of  Washington 
Nuclear  Physics  Laboratory  (UWNPL). 

We  found  the  multiple-bit  upsets  because  two  bits  flipped  within  the  same  byte  (with  the  F  ion  we  found 
only  two  upsets,  but  with  the  higher  LET  Br  ion  there  were  instances  of  three  upsets).  Koga  also  found 
double  upsets  within  the  same  byte  in  one  of  his  SRAMs  [in  this  case  by  a  different  vendor,  Mosaic 
(Hitachi)]  and  multiple  bit  errors,  but  not  within  a  single  byte  in  another  vendor's  SRAM  (Micron).  Thus, 
contrary  to  the  situation  with  SEU  of  similar  sensitivity  for  the  same  type  of  commercially  available  memory 
technology  (see  8.1,  “Effect  of  Memory  Size”  on  page  8-1),  there  appears  to  be  a  wide  variation  in  the  sensi¬ 
tivity  to  multiple-bit  upset  for  the  same  type  of  memory  technology. 
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Section  6.  Laboratory  Testing 

The  64K  SRAM  has  previously  been  tested  for  SEU  using  beams  of  heavy  ions  and  protons. 

heavy  ion  SEU  tests,  performed  at  Brookhaven  National  laboratory  are  given  m  terms  of  the  SEU  ctoss 

sectbn  as  a  function  of  the  linear  energy  transfer  (LET)  of  the  ions.  The  data  are  ^ 

Results  of  the  proton  SEU  tests,  in  terms  of  the  SEU  cross  section  as  a  function  of  proton  e^rgy  are  also 

found  in  Reference  12.  These  tests  were  carried  out  at  the  Harvard  Umv^sity  cyclotron.  The 

tests  were  performed  with  the  SRAMs  at  the  fuU  5  volt  operatmg  voltage  The  P^^on  tests 

with  the  SRAM  at  both  5  volt  operating  voltage  and  2.5  volt  standby  voltage.  In  addition  the  SRAM  w^^ 

tested  using  the  800  MeV  proton  beam  at  the  Los  Alamos  Meson  Production  Fac^ty  (LAMPF)  This 

was  carried  out  only  with  the  SRAM  at  2.5  volt  standby  voltage,  and  is  documented  m  Reference  13. 

As  indicated  at  aircraft  altitudes,  upsets  in  the  SRAMs  are  induced  primarily  by  the  atmosphenc  neutrons, 
fn  orf^m  ilate  the  upset  rate"  in  the  SRAM  due  to  neutrons,  we  required  --  f 
neutron  beams  to  provide  data  for  the  model.  The  neutron  SEU  testing  was  performed  at  two  ^ 

Boeing  Physical  Sciences  Research  Center  (BPSRC)  using  the  14  MeV  neutron  generator  and  at  the  Umver- 
sity  of  California  at  Davis  (UCD)  using  the  higher  energy  neutrons  produced  by  the  cyclotron. 


6.1  Neutron  Facilities  and  SEU  Test  Setup 

SEU  testing  of  the  SRAM  was  achieved  using  a  standard  board  of  28  memory  chips  provided  by  IBM  as  the 
S.  cS  bo»d  co^ected  through  .  Bocing-teigned  intcrfuou  boari  to 

computer  that  monitored  upsets  in  the  SRAMs.  For  both  neutron  sources,  only  the  board  mth  SRAMs 
and  the  connecting  cable  were  located  within  the  neutron  beam.  AU  other  wTth 

scalars,  etc.)  were  located  outside  the  room  containing  the  neutron  source.  All  28 

a  specific  pattern  (a  psuedo-checkerboard)  by  a  pattern  editor  and  read  at  regular  time  mtervals.  Error  , 
when  detected,  were  recorded  and  corrected  by  the  test  system. 

The  two  neutron  facilities  provided  significantly  different  neutron  learns.  * 

very  narrow  collimated  beam,  approximately  rx2'’.  We  sifted  in  the  test  bo^d  such 
centered  within  the  beam.  Immediately  adjacent  SRAM  devices  also  received  some  of  the  beam  so,  elTec 
STL  devices  recorded  upsets  due  to  the  neutrons.  The  BPSRC  14  MeV  neutron  generator  produces 
neuftons  over  an  approximately  2.r  field.  The  test  board  was  located  about  12  inches  from  the  head  of  the 
generator.  Thus,  all  28  devices  exhibited  upsets  once  the  generator  was  turned  on. 

6.1.1  Cyclotron  Produced  Neutron  Beam  Exposures  and  Dosimetry 

Energetic  neutron  and  proton  beams  are  produced  by  the  Crocker  National  Uboratory  cyclotron  at  UCD. 
S'  with  eneigie,  of  42  and  64  MeV,  wem  u,ed  .o  .eat  «,n.e  of  the  deveea,  Neutntm  wete 

produced  by  directing  a  beam  of  protons  into  a  Lithium  (’Li)  target. 

The  cyclotron  is  a  magnetic  resonance  accelerator.  It  consists  of  a  disc  shaped  chamber  that  is  split  into  two 
SveTwL  s^Lred  by  a  narrow  gap.  An  electric  potential  of  several  thousand  volts  is  placed  acros^ 
this  gap  and  the  poles  of  a  strong  electromagnet  are  aligned  normal  to  the  radii  of  the  h  ves. 
partiLs  (in  this  case  protons)  are  injected  by  a  source  into  the  gap,  near  the  center  ^ 
federated  to  one  of  the  halves  by  the  gap  potential,  fhe  magnetic  field  wuses  the  particles  to  rotate 
around  the  semicircle  half  until  they  reach  the  gap,  where  they  are  accelerated  by  the 

other  semicircle  half.  As  this  process  is  repeated,  the  particle  energy  is  increased  with  each  aceckra ‘°n 
across  the  gap  and  the  particle's  radius  of  revolution  is  gradually  increased  m  order  to  mamt^  a  constat 
period.  AfSr"many  revolutions,  the  particle  is  drawn  off  for  use  at  the  outer  walls  by  an  electrostatic  field. 
Specific  details  of  cyclotron  operation  are  presented  in  Reference  14. 
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The  proton  beam  drawn  off  of  the  cyclotron  travels  through  a  beam  tube  to  a  ste^g  m^et  where  it  is 
directed  towards  one  of  several  experimental  stations.  The  station  for  proton  irradiations  is  located  in  the 
facilities'  north  cave  and  the  neutron  irradiation  station  is  located  in  the  south  cave.  Because  protons  have  a 
large  range  in  air,  the  beam  does  not  require  an  evacuated  path  and  the  DUT  exposures  do  not  require  an 
evacuated  test  chamber.  The  cyclotron  continuously  produces  beam  during  a  sequence  of  test  trials  and 
DUT  exposure  is  controlled  by  the  operator,  who  remotely  inserts  or  withdraws  a  plug  into  the  beam  line. 

•Dosimetry  for  the  proton  irradiation  beam  line  is  conducted  using  a  Secondary  Emission  Monitor  (SEM) 
and  a  Faraday  Cup.  Both  are  resident  in  a  Faraday  cup  box  which  is  evacuated  to  maintain  the  stabihty  of 
the  SEM  output.  The  Faraday  cup,  which  prevents  beam  from  reaching  the  DUT,  can  ^  removed  from  the 
tv»jifnlinK  without  being  removed  from  the  box.  As  the  beam  is  steered  into  the  proton  irradiation  station,  it 
passes  through  a  degrading  foil  to  ensure  a  reproducible  and  uniform  beam  intensity.  Before  DUT 
irradiations,  the  SEM  current  measurement  is  calibrated  with  the  Faraday  cup  current  measurement  and  a 
Faraday  cup  to  SEM  ratio  is  calculated.  This  ratio  is  used  in  calculations  that  convert  the  SEM  value, 
measured  with  each  DUT  irradiation,  to  actual  fluencc.  This  dosimetry  process  for  proton  irradiations  has 
been  automated  and  is  operated  from  a  microcomputer  system.  This  system  is  described  in  Reference  15. 


UCD  Neutron  Spectra 


Figure  6-1.  Neutron  Spectra  for  Beams  Produced  at  UCD.  The  neutron  beam  has  a  sharp  peak  near  the  energy  of 
the  incident  proton  beam,  but  also  has  a  lower  energy  'tail'  distribution  that  continues  down  to  approxi¬ 
mately  10  MeV. 

The  neutron  beam  was  produced  by  bombarding  a  ’U  target  with  a  beam  of  protons.  The  nuclear  reaction 
of  interest  is  7U(p,n)’Be,  where  the  product  neutron  has  very  nearly  the  same  energy  as  the  incident  proton. 
The  characteristics  of  the  neutron  beam  were  determined  with  a  monitoring  system  located  upstream  of  the 
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DUT  target  The  dosimetry  method  involved  using  a  multi-wire  chamber  to  measure  the 

completely  m  Keierence  i  ...Li  i  r»f  49  MpV  and  64  MeV.  Exanunation  of  this 

in  the  following  section. 

6.1.2  Neutron  Generator  Produced  14  MeV  Neutron  Exposures  and  Dosimetry 

14.7  MeV  neottons  were  produced  wilh  the  14  MeV  neultou  generato,  “ 

t-o*.  ixmr  oenpratof  Neutrons  are  produced  by  bombardmg  a  titamum  tntide  target  (TiT)  with  UC  acceier 
SfdSLTions  whidt  produce,  the  reactiou  of  ottereU,  T(d,p)He<.  The  product  ueutren,  hatre  t»  e^ 
SSe^?:^itel,  13.4-14.7  MeV.  Approximately  lEll  — 

atofand  a  conservative  estimate  of  the  flux  at  a  distance  of  5  cm  from  the  TiT  target  is  3E8  ^ 

TiT  target  is  assumed  to  be  a  point  source  and  flux  vanes  as  S/47rr  where  S  is  the  ^  ^ 

the  radfal  distance  from  the  TiT  target.  As  these  neutrons  are  produced  as  a  result  of  th  (  ,T) 
reaction,  the  taU  feature  exhibited  in  the  cyclotron  neutron  beams  is  not  observed. 

Circuit  cards  containing  the  DUTs  were  placed  in  the  beam  a  few  inches  from  the  TiT  Wb 

were  conducted  at  ambient  atmosphere.  The  neutron  generator  was  started  a^  .the- 

irradiation,  rather  than  withdrawing  and  inserting  a  barrier  within  a  contmuous  beam  as  for  the  o 

cyclotron  simulations. 

The  neutron  fluence  for  each  run  (DUT  exposure)  was  determined  by  measuring  the  exposure  on  Thermd 
The  neutron  lienee  tor  wen  run  ^  ^  verification  method  was  also  used 

by^H^uSig  the  activation  of  a  Zirconium  (Zr)  foil  that  was  also  irradiated  with  the  DUTs.  The  TLDs 
used  were  TLD-700,  which  are  fully  enriched  in  ’Li,  and  have  a  known  °  m  ret  of 

mSu,  mu  luuL  memmmmeu,,  dcurmmed  with  the  TLD,  wum  verified  by  Zr  fod  act.vat.om  Zr 
has  a  13  MeV  threshold  for  the  (n.2n)  reaction  and  measures  the  totd  Hucnce  for  ““tro"*  wdh  a 
ereater  than  13  MeV  Following  a  test  sequence  using  a  Zr  foil,  the  activrty  of  each  uradiated  o  . 

UtUum  dSrf  Jnnaruum,"Gc(U).  detector.  17.0  measured  amivity  was  then  converted  mto 

neutron  fluence  >13  MeV  (see  Reference  17). 


6.2  Neutron  Upset  Cross  Section  Measurements 

Neutron  upset  measurements  were  made  at  the  neutron  energies:  14.7  MeV  (using  the  14  MeV 
;ror42  MevTr64  MeV  (both  using  the  UCD  cyclotron).  The  upsets  recorded  usmg  the  14  MeV 
nT^V^^I^to’r  sLn  in  Figure  6-2ln  page  6-4  through  Figure  6-4  on  page  6-6,  which  present  the 

data  in  a  three  dimensional  histogram  format. 

Figure  6-2  on  page  6-4  shows  the  distribution  of  747  of  the  836  upsets  among  SRAMs  whence 

L^was  operated  in  a  5  volt  active  mode.  While  in  the  active  mode 

corrected  as  the  memory  address  lines  of  the  28  devices  were  continuously  cycled  dunng  the  exposure.  ( 
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logic  analyzer  used  to  record  the  upset  data  could  capture  only  249  upsets  at  a  time;  for  three  cycles  this  is 
747  upsets  of  the  total  836  upsets  recorded  on  the  scaler). 

Figure  6-3  on  page  6-5  presents  the  distribution  of  the  369  upsets  among  the  28  devices  when  the  boMd  was 
operated  at  5  volts,  but  in  the  standby  mode.  For  these  tests,  the  memories  were  loaded  with  data  and  thm 
put  into  a  standby  mode  (with  addresses  not  cycling)  during  the  exposure.  Followmg  exposure,  the 
addresses  were  cycled  once  to  read  out  the  memory  contents  and  count  the  errors.  Figure  6-4  on  page  6-6 
shows  the  distribution  of  196  of  the  total  1 126  upsets  among  the  28  devices  when  the  board  was  operated  at 
2.5  volts  in  the  standby  mude.  Again,  the  28  devices  were  written  at  5V ,  put  into  a  standby  mode  (addresses 
not  cycling),  exposed  at  2.5V,  and  then  brought  back  up  to  the  normal  5V  operating  voltage  for  readout. 


5V  Active 

14  MeV  Neutron  Ruence:  4.14E9  n/cm^2 


Figure  6-2.  14  MeV  Upset  Histogram  (5V,  active). 
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5V  Standby 

14  MeV  Neutron  Ruence:  1 .8E9  r)/cw/^2 


Figure  6-3.  14  MeV  Upset  Histogram  (5V,  sUndby). 
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2.5V  Standby 

14  MeV  Neutron  Ruence:  2.2E8  n/cm^2 


Figure  6-4.  14  MeV  Upset  Histogram  (2.5V,  standby). 

Only  during  the  second  of  the  three  runs  did  the  logic  analyzer  unequivocally  capture  of  the  196  upsets^ 

Sirre  first  and  third  runs,  when  more  than  the  maximum  249  upsets  that  the  logic 

capture  at  a  time  were  recorded,  the  distribution  was  incomplete.  The  249  entnes  were  filled  up 

orSy  a  fraction  of  the  total  28  devices.  Thus  an  accurate  distribution  of  the  upsets  is 

second  run  However,  for  the  purposes  of  an  overall  average,  the  total  of  the  1 126  upsets  (297, 

the  three  runs,  respectively)  will  be  used,  to  be  divided  by  the  combmed  fluence  for  those  three  runs. 

The  upsets  recorded  using  the  UCD  cyclotron  neutron  source  with  the  peak  energy  “J 

Sire  S  r^age  6-7  Lough  Figure  6-8  on  page  6-10.  The  76  upsets  in  the  SRAMs  when  the  ^^d 
w^ooerated  at  5  volts  in  the  active  mode  are  shown  in  Figure  6-5  on  page  6-7.  Five  devices  account  for 
nearly^  the  upsets  (13  6  upsets/device  because  the  collimated  beam  only  strikes  a  small  portion  of  all  the 
FSi^^Sn  page  6-8  and  Figure  6-7  on  page  6-9  present  the  distribution  of  the  upsets  for 
two  runs  whence  board  was  operated  at  5  volts  in  the  standby  mode.  In  Figure  6-6  on  page  6-8,  55  of  the 
SeupltZtZ  devices,  Siting  in  an  average  of  1 1  upsets/device.  Results  of  the  s^ond  run  ^  a 
130/.  Ser  neutron  fluence  show  more  scatter.  The  same  five  SRAMs  average  15.8  upsets/device  but  th^ 
accountibr  only  84o/o  of  the  upsets.  The  remaining  15  upsets  are  distnbuted  among  five  separately  located 
devices  which  we  attribute  to  neutron  scatter  off  of  the  board. 
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lfJIS1601SLM  64kx1x28  SRAM  Test  Card 

U.C.  Davis  Cyclotron 


Figure  6-6.  Upset  Histogram  (UCD.  65MeV.  Low  Power  Static.  1st  Run). 
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IMS1601SLM  64kx1x28  SRAM  Test  Card 

U.C.  Davis  Cyclotron 


Figure  6-7.  Upset  Histogram  (UCD,  65MeV,  Low  Power  StaUc,  2nd  Run). 

Figure  6-8  on  page  6-10  and  Figure  6-9  on  page  6-11  present  the  upsets  recorded  at  the  UCD  cyclotron 
neutron  source  operated  at  a  peak  neutron  energy  of  42  MeV.  In  Fi^re  6-8  on  page  6-10  are  the 
when  the  SRAMs  were  operated  at  5  volts  in  the  active  mode.  In  Figure  6-8  on  page  6-10,  36  of  the  37 
upsets  occur  in  the  same  five  devices  as  with  the  64  MeV  peak  neutron  source,  averaging  7.2  upsets/device. 
Figure  6-9  on  page  6-11  presents  the  histogram  of  upsets  when  the  board  was  operated  at  2.5  volts  in  the 
standby  mode.  In  Figure  6-9  on  page  6-1 1,  42  of  the  45  upsets  occur  in  the  same  five  devices,  averaging  8.4 
upsets/device,  for  a  fluence  30%  of  that  received  by  the  SRAMs  in  the  5  volt  active  mode. 
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IMS1601SLM  64kx1x28  SRAM  Test  Card 

U.C.  Davis  Cyclotron 


Figure  6-8.  Upset  Histogram  (UCD,  40MeV,  Active). 


Section  6.  Laboratory  Testing  6-10 


Undassifled 


IMS1601SLM  64kx1x28  SRAM  Test  Card 
U.C.  Davis  Cyclotron 


Figure  6-9.  Upset  Histogram  (UCD,  40MeV,  Low  Power  StaUc). 


6.3  Neutron  Upset  Cross  Sections 

For  a  neutron  source  of  specific  energy,  the  neutron  upset  cross  section  was  obtamed  following  the  standard 
procedure  of  dividing  the  number  of  upsets  by  the  fluence.  However,  because  there  is  an  energy  spectmm  to 
the  cyclotron  source,  this  source  is  not  mono-energetic  and  we  had  to  account  for  the  effective  contnbuUon 
of  the  lower  energy  neutrons  in  producing  upsets.  This  was  done  through  the  adjustment  factor  which  is 
fully  described  in  6.4,  "Adjustment  Factor”  on  page  6-16. 

The  cumulative  data  from  the  neutron  upset  measurements  are  tabulated  in  Table  6-1  on  pa^  6-12, 
including  the  total  number  of  upsets,  upsets  per  device,  neutron  fluence,  and  neutron  cross  section.  Fot  the 
cyclotron  neutron  source,  the  key  data  is  the  number  of  upsets/device  m  those  devices  fully  withm  the  be^_ 
Some  devices  that  were  outside  the  beam  nevertheless  received  some  fluence  from  neutrons  scattered  off  ot 
the  portion  of  the  card  directly  within  the  beam. 


Section  6.  Laboratory  Testing  6-11 


Unclassifled 


Section  6.  Laboratory  Testing  6-12 


Unclassified 


Tabic  6-1  also  cont«m  one  other  daU  point,  that  based  on  the  tante  SRAM 
800  MeV  protons  at  LAMPF  (see  Ref.  13).  In  this  case,  too, 

hut  virtuaUv  all  28  recorded  some  upsets  due  to  beam  scatter.  We  believe  that,  at  800  MeV,  proton  upset 
“ss^ns  tine  same  as  neutron  ups«  cross  sections.  ITtus,  the  800  MeV  proton  npt«  cross 
section  is  taken  to  be  the  same  as  an  800  MeV  neutron  upset  cross  section. 

At  lower  energies,  the  proton  and  neutron  interactions  in  sUicon  are  from  identical.  Ziegler  ^ 

shown  that  th?  burst  generation  rates  for  alpha  particles  induced  in  sdicon  by  neutrons  and 
the  same  as  the  energy  approaches  100  MeV.  More  recent  data  from  an  extensive  data  generation  progr 
(Lf  19)  shows  thX  bLed  on  production  cross  sections  of  various  li^t  reaction  products  (neutrons, 
^otnf  al^lTa  particks,  and  deutemns).  the  neutron  and  proton  -ss  -ct-s  m  s^con  ^  .dem 

protons  and  neutrons  will  be  the  same,  but  this  applies  only  for  E>200  MeV. 

To  utilize  the  neutron  upset  cross  sections  for  upset  rate  calculations,  we  need  the  cross  sections  for  aU 
neutron  enerries  1-1000  MeV,  since  the  atmospheric  neutron  spectrum  extends  over  that  entm  ener^  rang 
Z  ”2  3e  ’of  the  Atmospheric  Neutron  Environment”  on  page  7-1).  Fortunately,  Bendel  developed  a 
S  parlll  motl  V  5o)  for  proton  induced  SEU  cross  sections  that  fit 

1980's  microelectronic  parts  rather  weU.  In  this  model,  the  upset  cross  section  m  lE-12  upsets  per 
proton/cm^  per  bit,  is 


(E)  =  (^)'\l-exp(-0.18r°')T‘, 


[6-1] 


where 


-(f)“ 


(E-A). 


[6-2] 


More  recently,  Stapor  [Ref.  21]  and  Shimano  [Ref.  22]  have  shown  that,  for  more  recent 

parts  a  two^iiarameter  model  is  needed  to  obtain  a  good  fit,  where  one  parameter  is  related  to  the 

asym’ptotic  ciJss  section,  and  the  second  to  the  threshold  energy.  FoUowing  Stapor,  this  two-parameter 

cross  section  fit  is  expressed  as; 


<t(E)  =  (^)  [l-exp(-0.18F"')]"  [6-3] 

and,  since  Y  remains  as  in  Eq[6-2],  the  two  parameters  to  be  specified  are  A  and  B. 

In  examininE  Table  6-1  on  page  6-12  we  observe  that,  based  on  two  sets  of  measurements;  those  with  the 
irW^vTutron  generator  L  the  cyclotron  source  with  the  64  MeV  peak  neutron  “er^.  there  is  no  red 
Jffi^lTZtr^ruS  Zss  seion  when  the  SRAM  is  operated  at  5  volts.  In  both  the  dynamic  and 
llX  modi  the  upL  cross  section  is  essentially  the  same.  With  the  64  MeV  source,  the  discrepancy  is 
about  15%,  and  with  the  14.7  MeV  source  less  than  2%. 

n.m  we  wiU  rnquim  only  two  neutron  upset  ems,  section  curves  for  the  64K  SRAM'  “ 

operated  at  5  volts  and  one  for  2.5  volts.  The  two-parameter  mode  of  Eqs[6-2,3]  was  fit  to  the  four  upret 
Srfon  Z  point,  for  the  SRAM  opemted  at  2.5  volt,,  the  rcuh,  whh  A- WMeV  md 
B/A«  1.125,  are  ,ho™  in  Figure  6-10  on  page  6-14.  The  ntoW  also  show,  ” ''l 

the  points  for  the  SRAM  at  5  volts.  Here,  a  similar  fit  was  made,  resulting  in  A  -  lOMeV  and  B/A  1.01. 
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Figure  6-11  on  page  6-15  shows  the  resulting  curve  from  the  model,  which  is  based  on  only  the  three 
neutron  measurements. 


Two-Parameter  Bendel  Model 

IMS1 601  Data  (2.5V  Static) 


Figure  6-10.  Bendel  Model  of  NSEU  Cross  SecUon  for  64k  SRAMs  (2.5V  Standby  Mode). 
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Two-Paraineter  Bendel  Model 

IMS1601  Data  (5V  Active) 


Figure  6-11.  Bendel  Model  ofNSEU  Cross  Section  for  64k  SRAMs  (5V  Active  Mode). 

FiRure  6-11  also  contains  three  data  points  from  proton  measurements.  The  two  values  from  Harv^d  tests 
are  from  Reference  12  and  the  100  MeV  point  is  from  Reference  65.  The  100  MeV  point  was  tested  by  the 
European  Space  Agency  (ESA)  and  is  for  a  slightly  different  64kxl  SRAM  (IMS  1600)  than  the  one  used  m 
all  other  tests  (IMS1601).  Nevertheless,  the  100  MeV  proton  cross  section  is  m  good  agreement  with  our 
The  two  points  from  Harvard  tests  clearly  do  not  fit  the  model  curve  very  well.  However,  ex^ation  of  all 
the  proton  data  in  Reference  12,  with  the  SRAM  operated  at  5  volts  shows  a  wide  vanation  m  cross  section 
responses  among  different  versions  of  the  SRAM  (with  and  without  an  epitaxial  layer)  and  how  the  part  was 
operated  (dynamic  and  static  modes).  For  protons  with  energies  of  148  MeV,  the  upset  cross  section  was 
50-70%  larger  when  operated  in  the  static  mode  compared  to  the  dynamic  mode,  and  this  applies  to  Iro 
epitaxial  and  non-epitaxial  memory  chips.  However,  for  50  MeV  protons,  the  epitaxial  parts  had  essentiaUy 
the  same  cross  section  in  both  the  dynamic  and  static  modes,  although  that  cross  section  is  more  than  two 
orders  of  magnitude  lower  than  our  results  with  64  MeV  neutrons. 

We  can  only  conclude  that  the  SRAMs  responded  differently  in  our  neutron  tests  than  they  did  in  the 
Harvard  proton  tests  and  we  are  not  sure  exactly  why.  However,  this  shouldn't  be  too  surpnsmg.  The  only 
other  parts  that  we  know  of  which  were  tested  with  both  protons  and  neutrons  of  several  energies  are  two 
16k  DRAMS,  the  Motorola  MCM4116AC20  and  the  Mo.stek  MK4116J-2.  The  neutron  and  proton  upset 
cross  sections  for  these  parts  are  given  in  Reference  44.  For  the  f  f 

sections  as  a  function  of  energy  is  quite  similar  to  Figure  6-11. 

does  not  resemble  Figure  6-11  nearly  as  much.  For  both  the  MCM41 16AC20  DRAM  and  our  64k  SRAM, 
theie  is  one  very  high  energy  point  representing  the  asymptotic  cross  section  for  both  neutrons  and  protons 
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(800  M=V  for  the  64k  SRAM.  4.2  GeV  for  the  16k  DRAM),  the  ero» 

MUtrons  are  higher  than  those  for  protons  with  at  least  twice  the  energy.  For  example,  for  both  devices  the 
14  MeV  neutron  cross  section  is  approximately  the  same  as  that  for  50  MeV  protons.  us  ’ 

for  some  de\dces,  the  geometries  of  the  sensitive  volume  are  such  that  low  energy  neutrons  (  .g.  ) 

are  capable  of  depositing  more  energy  in  the  sensitive  volume  through  the  energetic  recoils  created  than  are 

protons  (also  see  Reference  23). 

For  purpoK*  of  caloulattag  nrutron  indored  up«  rates  by  oteans  of  the  oeutran  ^ss  ^ 

“UpL  Rate  by  Neutroit  Cross  Section  Model"  on  page  7-8).  we  «dl  use  the  two-parameter  model  fits 
shown  in  Figure  6-10  on  page  6-14  and  Figure  6-11  on  page  6-15. 


6.4  Adjustment  Factor 

One  of  the  main  disadvantages  of  the  cyclotron  neutron  source  is  the  low  energy  tail.  Figure  6-1  on 
^  «  dhorSte^gy  spStrum  of  the  64  MeV  neutron  beam  that  was  used  for  some  of  the  prejuously 
tossir^set  measurJTenJT  Visual  esaminatiou  indicates  that  as  much  as  50% 
is  in  the  taU  It  is  reasonable  to  assume  that  some  of  these  tail  neutrons  deposit  sufficient  energy  within 
OUT  to  produce  upsets,  and  that  the  total  number  of  upsets  recorded  for  a  DUT  me  ude  a  contribution 
from  neufrons  in  the  tail.  It  has  been  shown  that  irradiations  using 

produced  as  much  as  a  factor  of  three  more  upsets  than  predicted  m  accepted  analytic  methods  [R^f.  23], 

L  the  source  of  this  discrepancy  appears  to  be  the  contribution  of  the  tail 

the  cyclotron  irradiations  is  to  investigate  upset  as  a  function  of  mcident  neutron  en  gy, 

upset  count  by  the  tail  neutrons  confuses  the  issue,  particularly  if  the  contribution  is  significant. 

To  compensate  for  the  effect  of  the  tail  neutrons,  an  adjustment  factor  is  defined  and  jjj® 

MlculatiS^  of  upset  cross  section.  This  adjustment  factor  may  be  thought  of  as  a  m^s  the 

peak  fluence  to  Lcount  for  the  contribution  of  the  tail  neutrons  in  gencratmg  upsets.  The  sought  after  result 
from  each  DUT  irradiation  is  the  upset  cross  section  for  the  peak  neutron  energy: 


Upsets  produced  by  peak  fluence 
^i^pk)  ~  Peak  fluence 

The  values  actually  measured  and  recorded  with  each  neutron  irradiation  include  upsets  caused  by  the  entire 
neutron  energy  spectrum.  It  allows  a  cross  section  to  be  calculated  as  follows: 

Upsets  produced  by  total  fluence 
‘^(^jpeefrum)  =  Peak  fluence  ” 


The  foUowing  adjustment  factor  is  defined  and  appUed  to  the  peak  fluence  to  convert  Eq[6-5]  into  the  forai 
ofEq[6-4]: 


Predicted  upsets  produced  by  total  fluence 
~  Predicted  upsets  produced  by  peak  fluence 


[6-6] 


To  a  first  approximation,  Eq[6-6]  is  simply  the  ratio  of  the  flux  from  the  total  neutron  spectrum  to  tha 
about  tS  peak  neutron  energy.  However,  the  effectiveness  of  a  neutron  m  generatmg  upset  is  not  equd 
across  the  ^  of  neutron  energies.  Consequently,  an  energy  dependent  weighting  function  is 
into  the  calculation  to  account  for  the  relative  effectiveness  of  a  neutron  with  a  given  encr^  of  produemg 
upset.  The  mathematical  form  of  the  adjustment  factor.  A,  with  the  weightmg  function  included  is. 


A  =  IdNIdE  W{,E)  dEHihlpkW(Epk)'\ 


[6-7] 
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where  dN/dE  is  the  differential  neutron  fluence  spectrum,  W(E)  is  the  weighting  funrtion,  Np^  is  the  peak 
neutron  fluence,  and  W(Epk)  is  the  weighting  function  at  the  peak  energy.  In  practice,  this  integration  is 

performed  numerically. 

Two  approaches  for  weighting  functions  were  studied  in  the  calculation  of  adjustment 
approach  was  to  use  neutron  scattering  cross  sections  (total  and  melastic)  m  the  ^cul^ions.  M 
ap^ach  was  to  use  the  Burst  Generation  Rate  (BGR)  as  the  weighting  function.  The  BGR  is  defined  as 
the  probability  that  a  neutron  with  energy  En  will  generate  a  recoil  with  ener^  Er  or  ^ter  in  a  colhsio 
with  a  sihcon  atom.  The  BGR  concept  was  originated  by  Ziegler  and  Lanford  [Ref.  24]  and  is  more  My 
described  in  7.4,  "Upset  Rate  by  the  Burst  Generation  Method”  on  page  7-9. 


Table  6-2  summarizes  the  results  from  adjustment  factor  calculations  for  the  42  MeV  and  (A  MeV  neutrori 
beams,  made  with  a  variety  of  weighting  functions  and  for  several  peak  widths  (width  is  defined  ° 

bms  with  size  AE,  which  was  1  MeV).  The  energy  spectrum  for  each  of  these  b^s  is  shown  m  Rgim  6-1 
on  oaw  6-2.  The  weighting  functions  used  in  the  adjustment  factor  calculations  are  illustrated  m 
Fieure  6-12  on  page  6-18.  The  adjustment  factors  finally  selected  for  use  in  the  SEU  ctoss  section  cdcu- 
lations  were  calculated  using  the  BGRs  for  a  recoil  of  energy  Er=3.5  MeV  or  greater,  based  on  con^der- 
ations  discussed  in  7.4,  “Upset  Rate  by  the  Burst  Generation  Method  on  page  7-9  and  a  pe^  width 
definition  of  seven  bins.  The  results  are  as  follows:  for  the  64  MeV  peak  neutron  source,  A  =  2.6,  and  for  the 
42  MeV  peak  neutron  source,  A=  1.8. 


Table  6-2.  Peak  to  ToUl  Spectrum  Adjustment  Factors.  The  adjustment  factor.  A,  is  equal  to  the  intepi  of  the 
soectrum  weighted  by  cross  section  divided  by  the  integral  of  the  peak  weighted  by  cross  section. 

Bin 

s(tot) 

s(inelast) 

Er=l 

Er  =  3 

Er  =  3.5 

BGR  =  k 

42  MeV  Neutron  Source 

A(1  bin) 

4.404563 

5.212414 

5.538665 

5.042053 

4.283928 

4.321168 

A(3  bin) 

2.171903 

2.554304 

2.654919 

2.413694 

2.090897 

2.137184 

A(5  bin) 

1.956711 

2.294084 

2.358856 

2.143178 

1.874155 

1.928339 

A(7  bin) 

1.893604 

2.216774 

2.267665 

2.059708 

1.809269 

1.867508 

A(9  bin) 

1.822437 

2.128438 

2.159885 

1.960904 

1.734572 

1.799392 

A(ll  bin) 

1.739968 

2.024989 

2.030749 

1.842422 

1.646601 

1.720930 

A(13  bin) 

1.640132 

1.898863 

1.871734 

1.696511 

1.538990 

1.626374 

A(15  bin) 

1.551169 

1.782730 

1.728077 

1.564747 

1.441670 

1.541667 

64  MeV  Neutron  Source 

A(1  bin) 

12.72771 

14.08212 

19.01474 

14.52559 

10.19565 

11.35942 

A(3  bin) 

4.898217 

5.419543 

7.318006 

5.590668 

3.924177 

4.371763 

A(5  bin) 

3.679500 

4.073171 

5.503167 

4.212678 

2.957784 

3.287118 

A(7  bin) 

3.249582 

3.597569 

4.861077 

3.722447 

2.613719 

2.903518 

A(9  bin) 

3.104731 

3.437644 

4.645659 

3.559300 

2.499347 

2.774750 

A(ll  bin) 

3.071929 

3.401717 

4.597710 

3.524186 

2.474852 

2.746023 

A(13  bin) 

3.029528 

3.355814 

4.537293 

3.482248 

2.445839 

2.709700 

A(15  bin) 

2.971859 

3.293841 

4.456540 

3.428191 

2.408670 

2.660988 
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Section  7.  Neutron  Upset  Model 


7.1  Radiation  Environment  of  the  Atmosphere 

The  natural  radiation  environment  of  the  earth  is  primarily  influenced  by  the  gdactic  cosmic  rays^  ^ 
primary  cosmic  rays  that  are  continuously  bombarding  the  earth  ongmate  outside  the  solar  system,  and 
Lnsi7of  about  85%  protons,  12%  alpha  particles,  and  3%  heavy  ions,  which  have  extremely 
(>1000  MeV/amu).  As  the  cosmic  rays  enter  the  atmosphere,  they  mteract  with  the  oygen  ^d  “Jr  ^ 
atoms  within  the  atmosphere,  creating  neutrons  and  a  host  of  other  secondary  particles  (see  Figure  7-1  on 

page  7-2). 

As  a  result  .  the  radiation  environment  at  aircraft  altitudes  consists  of  a  num^r 
including  neutrons,  protons,  electrons,  muons,  pions,  heavy  ions,  and  others, 

271  have  previously  shown  that,  at  aircraft  altitudes,  it  is  the  neutrons  that  are  most  important  m  terms  of 
UuZ  S  elrupsets.  Others  have  shown  that  this  is  also  true  with  respect  to  the  radiation  dose 

equivalent  delivered  to  aircraft  pilots  and  crew  [Refs.  37,  35]. 

As  a  result,  we  will  concentrate  on  defining  only  the  atmospheric  neutron  environment.  ojher 
ment,  e.g.  protons,  pions,  etc.  could  also  be  defined.  This  would  not  only  gam  us  very  kittle  m  under- 
standimr  and  predicting  how  SEU  are  induced  at  aircraft  altitudes,  but  it  would  also  add  confusioti  by 
defining  an  unnecessarily  complex  environment.  In  7.6,  “Correlation  with  Flight  Results”  ori 
will  demonstrate  that,  by  focusing  on  only  the  neutron  environment  we  can  predict  the  upset 
by  comparing  calculated  values  with  the  measured  upset  rates  tabulated  m  Section  3,  IBM  Fhght  Exper 
imental  Data”  on  page  3-1  and  Section  4,  “Military  Avionics  Field  Data”  on  page  4-1. 

At  higher  altitudes,  e.g.  >75,000  feet,  neutrons  may  not  be  the  dominant  radiation  component  m  terms  of 
induiig  upsets  (see  Refs.  25  and  26).  Even  at  60,000  feet,  the  heavy  ion  comimnent  is  pre^sent  at  hi^ 
latitudes,  whUe  it  cannot  be  measured  at  30,000  feet  or  at  lower  latitudes  as  can  be  seen  m  Table  3-1  on 

page  3-7 

Figure  3-4  on  page  3-8  contains  the  LET  spectrum  measured  at  the  high  latftude  location,  ^ 

29]  measured  the  LET  spectrum  at  50,000-60.000  ft  altitude,  by  flying  a  pm  diode  ^^y. 
depletion  in  an  airplane.  He  found  that,  although  there  were  some  heap,  ions  P^f 
hiSiest  channels,  the  great  majority  of  counts  were  by  lowp  LET  prides  pnm^y 

trmis  and  secondary  protons  in  the  atmosphere.  Thus,  for  aircraft  altitudes,  by  defming  the  atrnosphenc 
neutron  environment,  we  provide  the  practical  tool  necessary  to  calculate  upset  rates  m  microelectrom 

devices. 


7.2  Model  of  the  Atmospheric  Neutron  Environment 

As  indicated,  the  atmospheric  neutron  environment  is  primarily  responsible  for  SEU  m  ayiomcs 

systems  and  so  a  model  for  these  neutrons  was  developed,  mse  neutrons  ™t 

structures  Furthermore,  as  the  neutrons  are  created  by  the  cosmic  rays,  they  mteract  further  with  the 
atmosphere,  and  the  equilibrium  flux  of  neutrons  in  the  atmosphere  is  the  result  of  several  competmg  proc¬ 
esses.  These  processes  include; 

1.  Creation  of  the  neutrons  by  cosmic  ray  interactions  within  the  atmosphere; 

2.  Decrease  of  the  cosmic  ray  intensity  with  decreasing  altitude; 

3.  Neutron  diffusion; 

4.  Neutron  scattering  within  the  atmosphere;  and 

5.  Neutron  absorption  in  the  atmosphere. 
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The  net  result  is  an  atmospheric  flux  that  peaks  at  about  60,000  feet.  Between  45,000-75,000  feet  the 
neutron  flux  is  approximately  constant;  above  and  below  this  range  of  altitudes  the  flux  decreases.  At  sea 
level  the  neutron  flux  is  several  hundred  times  less  than  the  peak  flux. 


igure  7-1.  Radiation  Environment  in  the  Atmosphere.  As  primary  cosmic  rays  enter  the  atmosphere,  they  interact 
with  the  oxygen  and  nitrogen  atoms,  creating  neutrons  and  a  host  of  other  secondary  particles. 
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The  neutron  flux  with  energies  in  the  range  of  1-10  MeV  is  shown  in  Figure  7-2  oii  page  7-3  as  a  function 
of  altitude,  based  on  data  from  References  30  and  31.  Due  to  SEU  thresholds  in  silicon,  only  neutrons  with 
energies  exceeding  1  MeV  are  important.  AdditionaUy,  the  shape  of  the  neutron  energy  spectrum  does  not 
vary  much  as  a  function  of  altitude.  Therefore,  the  neutron  flux  in  the  1-10  MeV  range,  for  which  vanations 
with  latitude  and  altitude  have  been  measured,  is  representative  of  the  variation  in  flux  over  the  entire 


neutron  energy  spectrum. 
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1-10  MeV  Atmospheric  Neutron  Rux 


Figure 


7-2.  Neutron  Flux  vs  Altitude.  This  graph  shows  the  absolute  and  normalized  1-10  MeV  neutron  flux  as  a 
function  of  altitude.  It  is  based  on  measurements  by  R.B.  Mendel!  et  al,  J.  Geophys.  Res...  68,  1963  an 
S  S  Holt  et  al,  J.  Geophvs.  Res..  71,  1966.  The  flux  peaks  at  about  60,000  feet. 


The  cosmic  rays  that  create  the  atmospheric  neutrons  are  deflected  by  the  earth's  magnetic  field.  The  mag¬ 
netic  field  acts  as  a  momentum  filter,  preventing  particles  with  less  than  a  pven  momentum  fi-om  ^netrating 
to  certain  altitude-latitude  combinations.  Because  the  earth's  magnetic  field  is  approximately  a  dipole,  the 
shielding  is  maximum  at  the  magnetic  equator  and  minimum  at  the  magnetic  poles.  This  results  m  an  atmo¬ 
spheric  neutron  flux  which  is  approximately  six  times  more  intense  at  the  poles  than  at  the  equator.  At 
latitudes  of  greater  than  60  degrees  the  flux  is  approximately  constant.  The  neutron  flux  as  a  funrtion  of 
geographic  latitude  is  shown  in  Figure  7-3  on  page  7-4,  and  is  based  on  neutron  measurements  as  a  furiction 
of  geomagnetic  cutoff  from  Reference  32,  and  geomapetic  cutoff  values  as  a  function  of  geographic  latitude 
from  Reference  33  which  we  have  averaged  over  longitude. 
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Figure  7-3.  Neutron  Flux  vs  Latitude.  This  graph  shows  the  absolute  and  normalized  1  -10  MeV  neutron  flux  as  a 
*  function  of  latitude.  It  is  based  on  measurements  by  M.  Merker  et  al,  J  Geophys.  R<S..  78.  1973  and 

geomagnetic  cutoff  values  from  NRL  5901.  1986  (J.  Adams).  A  small  scale  factor  was  used  to  adjust  the 
1-10  MeV  flux  to  a  value  of  0.85  n/cm’-sec  at  45°  and  40,000-fl  altitude. 

The  variation  of  the  neutron  flux  as  a  function  of  the  neutron  energy  is  unportant  in  characterizing  the 
atmospheric  neutrons.  This  is  caUed  the  differential  neutron  flux  and  several  different 
this  measurement  obtaining  simUar,  although  not  identical,  results.  In  Figure  7-4  on  page  7-5  the  differen¬ 
tial  neutron  flux  from  Reference  34,  which  is  somewhat  more  conservative  at  lower  enerpes  comp^ 
other  measurements,  is  plotted  as  a  function  of  energy.  The  differential  neutron  flux  m  Figure  7-4  on 
page  7-5  is  used  in  this  report  for  purposes  of  calculating  the  induced  SEU  rate  m  the  vanous  imcroelec- 
iroSc  devices  by  the  atmospheric  neutrons.  This  curve  is  designated  as  the  normalized  neutron  flux  at  a 
latitude  of  40-50°  and  an  altitude  range  of  35,000  to  45,000  feet. 
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Atmospheric  Neutron  Spectrum 


Figure 


7-4.  DilTerential  Neutron  Flux  vs  Energy.  This  graph  shows  the 

atmosohere  as  a  function  of  neutron  energy.  U  is  based  on  measurements  by  NASA-Amw  at  4t),uuu  t 
and  45°  to  50°  north  (geomagnetic)  latitudes  and  normalized  1-10  MeV  neutron  flux  o  .  n/cm  ' 

Hewitt  et  al,  Health  Sivsics.  34.  375,  1978).  For  the  worst-case  flare-enhanced  djjerential  neutron  flux 
spectrum  in  the  atmosphere,  see  T.W.  Armstrong  et  al.  Nucl.  Sci.  Eng..  37.  337.  1969. 

A  new  mathematical  model  of  the  atmospheric  neutron  environment  was  very  recently  developed  by  John 
Wuin  S Thn  Nealy  of  the  NASA-Langley  Research  Center  [Ref.  35].  It  too  ts  based  on  « 
measurements  in  the  1-10  MeV  range,  and  uses  data  taken  on  both  airplanes 

these  two  sets  of  data,  they  find  that  the  presence  of  a  large  commercial  airplane  debases  the  flux  by  about 
10%  (i.e.  the  energetic  neutron  flux  is  attenuated  10%  due  to  interactions  with 

This  new  model  is  more  comprehensive  than  our  model  which  is  represented  m  Figures  7-2  7-3,  and  7-4  ^d 
Eq[7-1],  although  we  believe  our  model  to  be  both  easier  to  use  and  sufficiently  accurate  to  support  y 

analysis  of  the  flight  upsets  in  microelectronics. 

Advantages  of  the  Wilson-Nealy  model  are  a)  the  explicit  incorporation  of  the  geoma^etic  rigidity  cutoff 
compared  to  the  averaging  of  the  cutoff  over  longitude  in  our  model  (our  model  enables  the  ^  of  ^ 
geomphic  latitude  as  a  parameter,  which  is  more  readily  available  than  a  map  of  geomagnetic  cutoffs),  an 
S^he  incorporation  of  a  factor  to  account  for  cosmic  ray  modulation  (i.e.  how  the  atmosphenc  neutron  flux 
JLJes  S^Tcha^ges  in  the  cosmic  ray  intensity).  Cosmic  ray  modulation  is  accounted  for  through^e 
response  of  one^of  several  well  known  neutron  detectors  generally  located  at  high  latitude  srtes,  e.g.  the  Deep 
Ri^  Monitor  at  Deep  River,  Ontario,  Canada.  Wilson's  model  indicates  that  t^  effect  °f“®7  Showed 
ulation  on  atmospheric  neutrons  is  very  small.  From  July- December  1991  ^  '7  °"j-i  fo-  i  in 

a  variation  of  ateut  25%  (high  of  6410,  low  of  4995,  see  Ref  36),  yet  the  Wilson-Nealy  model  for  1- 
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MeV  neutrons  at  35,000  feet  showed  a  change  of  less  than  2%  in  the  flux.  Two  other  very  recent  atmo¬ 
spheric  neutron  models  models  (see  Refs.  37,  38)  dealing  more  with  the  dose  equivalent  to  passengers  ^d 
OTW  than  the  neutron  flux,  were  also  published,  along  with  the  Wilson-Nealy  model  at  a  session  organized 

by  one  of  the  authors  (EN). 

With  respect  to  inducing  SEU  in  avionics,  the  altitude  variation  of  the  atmosphenc  neutron  flux,  shown  in 
7-3  is  the  most  important  effect.  It  shows  that  low  flying  aircraft,  e.g.  hehcopters  ^d 

.  SX  aitoS^e4»=»dtoaneum,„cnvi™™«n.«...i»»lowa. 

larger  an^gh  flying  ty^s  of  military  aircraft.  However,  Figure  7-2,  as  well  as  the  Wilson-Nedy  model,  are 
baS  only  on  nSro^in  the  1-10  MeV  range.  To  support  our  contention  that  this  altitude  « 

representative  of  the  entire  energy  spectrum  of  the  atmospheric  neutrons,  we  have 

^e  ^20-year-old  neutron  measurements  to  obtain  the  altitude  variation  of  neutrons  m  the  10-100  MeV 
range. 

A.  Preszler  measured  the  angular  distribution  and  altitude  dependence  of  atmosphenc 

MeV  through  balloon-borne  instrumentation  launched  at  Palestme,  Texas  [Ref.  3  ].  neutron 

measurement  was  made  at  about  35,000  feet  (246  gm/ern^).  F.  Ait-Ouamer  f 

data  recorded  on  1981  baUoon  flights  launched  at  Ahce  Spnngs  m  central  Austraha  (24  S- 

40).  He  used  this  data  to  determine  the  angular  distribution  of  the  f  mospheno  neutrons  m  the  10^100  MeV 

range.  The  lowest  altitude  measurement  was  made  at  approximately  25,000  feet  (400  ^/cm  )^  _  Preszler 

for  her  Ph.D.  thesis  [Ref.  41],  buUt  a  very  sensitive  neutron  spectrometry  system  similar  to  that  of  ^ 
that  was  housed  in  a  trailer.  The  trader  was  set  up  at  three  high  altitude  locations  m  the  United  States 
[Leadville,  CO  (10,000  ft),  Boulder,  CO  (5,476  ft.)  and  Mt.  Washington,  NH  (6,070  ft)]  where  the  angular 
distribution  of  neutrons  up  to  170  MeV  were  measured  (see  Ref.  41). 

For  purposes  of  calculating  neutron-induced  upset  rates,  we  are  interested  in  only  the  ^otal  neutron  flux  Le^ 
that  inte^ated  over  aU  4,r  steradians.  We  therefore  integrated  the  neutron  angular  fluxes  obtamed  by 
Preszler  Sd  Ait-Ouamer  to  obtain  the  total  neutron  flux  at  their  various  balloon  dtitudes.  ^axena  made 
Ly  gmund  level  measurements,  so  she  had  a  2,r  geometry  to  integrate  over  (essentially  no  ^  ^ 

up  offThe  ground)  in  order  to  obtain  the  total  neutron  flux.  Her  total  neutron  flux  values  at  the  three  hi^ 
altitude  lorShms  were  normalized  using  Figure  7-3  on  page  7-4  to  the  latitude  of  Preszler  s  balloon  meas¬ 
urements,  and  then  combined  with  Preszler  s  data. 

The  resulting  atmospheric  neutron  flux  curves  as  a  function  of  altitude  are  shown  in  Fi^re  7-5  J'T 

The  first  curve,  that  for  neutrons  with  energies  of  1-10  MeV,  is  identical  to  Figure  7-2  on  page  7-3,  except 
ihat  the  normalization  is  based  on  the  peak  flux  being  set  to  1.0.  In  Fi^re  7-5  on  page  7-7  are  also  shown 
the  two  10-100  MeV  atmospheric  neutron  flux  curves,  one  based  on  the  combmed  Preszler-Saxena  ^ 
and  the  second  on  the  Ait-Ouamer  values.  The  shape  of  the  flux  as  a  function  of  altitude  curves  for  the^o 
energy  groups,  1-10  MeV  and  10-100  MeV  of  the  atmosphenc  neutrons  are  in  very  good  agreement.  Ihi. 
verifSThe  assertion  that  the  1-10  MeV  neutron  group  is  representative  of  the  . 

trum.  We  further  found  that  the  Preszler  and  Ait-Ouamer  angular  neutron  fluxes  had  too  much  uncertain  y 

in  them  to  allow  for  a  finer  energy  breakdown. 
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Neutron  Rux  Comparison 

1-10MeV  and  10-100MeV  Energy  Ranges 


Figure  7-5.  Neutron  Flux  vs  Altitude  (1-10  and  10-100  MeV  Comparison). 

Even  though  some  measured  atmospheric  spectra  (e.g.  see  Reference  39)  are  flatter  in  the  10-100  MeV 
region,  the  spectrum  in  Eigure  7-4  on  page  7-5  is  higher  at  lower  energies  and  so  overaU  serves  as  a  good 
representation  of  the  differential  neutron  flux  in  the  atmosphere.  The  fit  we  use  for  this  spectrum  is: 

dNIdE  =  0.3459E" exp[  -  0.01522(/n£)^]  n/cm^-sec-MeV  [7  -  1] 

This  differential  neutron  flux  is  normalized  to  yield  a  flux  in  the  1-10  MeV  energy  range  of  0.85  n/^"-sec, 
which  applies  at  40,000  feet  altitude  and  45°  latitude.  This  spectrum  also  yields  sunilar  neutron  fluxes  at 
0.87  n/cm^-sec  over  the  10-100  MeV  range  and  0.75  n/cm^-sec  over  the  100  to  1000  MeV  range. 

1000  MeV  appears  to  be  a  practical  upper  limit  of  the  atmospheric  neutron  energy  for  purpoMS  of  calcu¬ 
lating  upset  rates.  The  only  reliable  measurement  of  the  atmospheric  neutron  spectrum  at  very  high  energies 
{>1000  MeV)  is  by  W.  Hess  et  al  [Ref.  42].  For  E>1000MeV,  this  spectrum  exhibits  a  M-off  m  ener^ 
that  can  be  approximated  as  E-2-2,  which  is  much  more  rapid  than  our  spectrum  (E<1000MeV)  which  Ms 
off  approximately  as  E  ”.  Thus,  for  energies  >1000MeV,  the  neutron  flux  will  decrease  much  more  rapidty 
than  for  E<1000MeV,  so  the  contribution  to  the  upset  rate  from  these  very  high  energy  neutrons  will  be 
niinimal  and  can  be  ignored. 

Solar  flares  can  produce  additional  radiation  and  hence  cause  an  increase  in  neutron  flux  beyond  that  of  the 
worst  case  daily  environment.  The  worst  case  solar  flare  was  encountered  on  23  February  1956.  It  was 
conservatively  estimated  that  the  peak  flux  was  approximately  1,000  times  the  normalized  neutron  flux  (see 
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tude,  high  latitude,  and  the  worst  case  solar  flare. 


■m  neuton  »os,  action  methodology  provide,  e  diree.  co.mle.ioo  '»™“”  ^‘Xr^tZoTrSh 

or  „e„.roo  energle.  to  ohuin  the  de^  upee.  rote  (o.  urot.  of 
upsets/sec-device,  or  bit).  This  is  represented  mathematically  as 


Upset  Rate  =J  dNldEff„fgu(E„)dE 


[7-2] 


where 


dNjdE  =  atmospheric  differential  neutron  spectrum;  and 
,  =  NSEU  cross  section. 


^nseu 


In  6  3  “Neutron  Upset  Cross  Sections”  on  page  6-11  we  showed  how  the  two-parameter  Bendel  model 

SoriL  e  good  ft.  to  the  neutron  upm.  croc  metion.  for  the  64k  SRAM  » f  "^STon 
Lae  6-14  and  Figure  6-11  on  page  6-15.  One  cross  section  curve  was  generated  for  the  condition  th 

64k  SRAM  operated  at  5  volts  and  another  for  when  it  was  o^rated  at  2-5  volts^  •■N^on'^pser Cro"s 
are  tabulated  in  Table  6-1  on  page  6-12  and  the  fit  is  pven  by  Eqs[6-2,3  in 

Sections”  on  oaae  6-11  6.3,  "Neutron  Upset  Cross  Sections”  on  page  6-1 1  also  cont^s  the  p^ameters  A 

^?Tb/A)  forTe  2.5  volts  Ind  5  volts  operating  conditions.  Eq[7-1]  in  7.2,  "Model  of  the  Atmojhenc 
NlrrEnvLonment”  on  page  7-1  gives  the  ana^ical  expression  for  the  — 
flux,  dN/dE,  shown  in  Figure  7-4  on  page  7-5.  This  expression  appbes  at  an  7.4 

latitude  of  45°  For  other  altitudes  and  latitudes.  Figure  7-2  on  page  7-3  and  Figu  P  ^ 

pm“t  the  .ppropriate  correction  factor.,  lltus.  having  Ute  NSEU  cm.,  met, on  rndte  unplcn.cn.ahon  of 
the  neutron  cross  section  model  via  Eq[7-2]  rather  straight  forwar  . 

The  main  difficulty  is  that  only  a  handful  of  microelectronic  parts  have  undergone  SEU  testing  with  neu- 
Tefe“  23  45  44,  and  46  contain  most  of  the  known  pubUshed  data  on  neutron  mduced  upsets. 
Many  more  upset  measurements  have  been  made  with  protons,  but  even  so  the  number 
S  TbUshed  data  is  available  is  on  the  order  of  80-100  (Ref.  47),  but  many  of  these  are  older,  early  1980 
,  as  indicted  in  6.3.  -Ncu.mn  Up^  Cn,c  “  7“,^ 

oroton  and  neutron  upset  cross  sections  are  the  same  only  for  energies  >200  MeV.  We  have  simira  ^ei 
48'!  that  for  parts  tested  at  UCD  with  64  MeV  neutrons  and  62  MeV  protons,  the  proton  cross  s^ion  may 
S  uX  a  fSr  of  two  larger.  Nevertheless,  contradicting  this  is  the  data  shown  in  6.3,  "Neutron  Up  e 
Som  Lio?  of  page  6.fl  from  previous  SEU  teeing  of  the  64k  SRAM  wtth  pmtons  that  gave  upset 
cross  sections  considerably  lower  than  our  neutron  results. 

We  conclude  that  proton  upset  cross  sections  at  low  energies  might  be  used  as  7^" 

there  is  considerable  uncertainty  in  making  this  assumptions,  iJ ^Xdata 

the  results  for  the  64k  SRAM.  Proton  cross  sections  at  high  energies  (>200  MeV)  are  rare,  b 
is  found,  it  car  be  used  as  the  neutron  cross  sections  with  much  greater  certamty. 
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7.4  Upset  Rate  by  the  Burst  Generation  Method 

The  Burst  Generation  Rate  (BGR)  methodology  utilizes: 

1.  device  SEU  characteristics  determined  in  heavy  ion  testing;  and 

2.  t?K»tatpH  calculated  values  of  energy  deposition  in  silicon  by  neutron  interactions  (the  BGRs) 

to  predict  the  upset  rate  for  a  given  device-type  due  to  interactions  with  the  atmospheric  neutron  environ¬ 
ment.  As  stated  in  2.1.1,  “Soft  Error  Mechanisms”  on  page  2-1,  the  mechanism  for  NSEU  is  the  burst  of 
charge  produced  by  the  reaction  products  of  a  neutron-silicon  interaction.  When  this  burst  of  charge  is  gen¬ 
erated  within  the  sensitive  volume  of  a  device  and  is  greater  than  the  critical  charge,  Q^,  then  an  upret 
occur.  This  alternative  method  is  more  indirect  than  the  neutron  cross  section  method  discussed  m  7.3, 
“Upset  Rate  by  Neutron  Cross  Section  Model”  on  page  7-8.  However,  it  has  one  great  merit  m  that  it 
utilizes  heavy  ion  SEU  test  data,  and  many  hundreds  of  microelectronic  devices  have  undergone  such  SEU 
testing. 

The  BGR  methodology  is  formulated  in  terms  of  two  key  parameters:  a)  the  sensitive  volume,  V,  which  is  a 
device-specific  value  representing  the  size  of  the  sensitive  repon  within  which  the  burrt  of  charge  generated 
by  the  neutron-induced  recoil  will  produce  an  upset,  and  b)  the  recoil  energy,  E,,  that  is  equivalent  to  Qc  for 
the  device  [Er(MeV)  =  Qc(pC)x22.5MeV/pC  in  silicon],  and  in  terms  of  two  functions:  a)  the  BGR(E„,Er), 
and  b)  the  differential  flux  of  atmospheric  neutrons,  Eq[7-1].  In  mathematical  terms  the  BGR  methodology 
gives  the  upset  rate  as  (see  Reference  49): 


Upset  Rate  =  KCJ  BGR{E„,Er)dNldE  dE,  [7-3] 


where 


V  =  sensitive  volume; 

dNjdE  =  differential  neutron  flux  spectrum; 

E„  =  neutron  energy;  and 
Er  =  recoil  energy. 

An  additional  constant  factor,  C,  is  used  to  account  for  collection  efficiency,  the  contribution  from  light  ions, 
and  other  effects.  In  practice,  this  integration  is  performed  numerically. 

Neutron  BGR  is  defined  as  the  probability  that  a  neutron  with  a  given  energy,  En,  will  interact  with  a  silicon 
atom  and  produce  a  recoil  with  energy  Er  or  greater  (see  Reference  49).  These  BGRs  are  generated  from 
neutron  cross  section  data  by  performing  the  reaction  kinematics  to  determine  the  energy  distnbutions  of  the 
recoils  for  each  type  of  neutron-silicon  reaction.  For  neutrons  with  enerpes  less  than  approximately  20 
MeV,  these  are  straight  forward  calculations  that  involve  only  two  reaction  products  -  a  recoil  and  a  sec¬ 
ondary  -  and  there  are  nine  reactions  to  consider  (see  Reference  50).  For  neutrons  with  energies  greater  than 
20  MeV,  the  calculations  are  complicated  by  the  addition  of  more  reaction  products  and  many  more 
reactions’,  so  a  probabiUstic  approach  is  used.  A  complete  description  of  the  BGR  methodology  and  the 
BGR  data  set  is  pven  in  References  49  and  50. 

The  BGR  methodology  is  performed  in  five  steps.  First,  the  two  key  device  SEU  characteristics,  the 
asymptotic  cross  section  and  LET  threshold,  are  obtained  from  the  heavy  ion  upset  cross  section  curve. 
Second,  the  device  sensitive  thickness  is  determined  (in  units  of  iim)  and  is  multiplied  by  the  asyinptotic 
cross  section  (in  units  of  cm^/bit  or  device)  to  obtain  the  device  sensitive  volume  (in  units  of  cm  -fim)- 
Third,  the  assumed  sensitive  thickness  is  multiplied  with  the  LET  threshold  and  the  density  of  silicon  to 
obtain  the  recoil  energy,  E,,  necessary  to  produce  an  upset  (MeV-cm*/mgx/imx0.233mg/cm*-/im  in  silicon). 
This  recoil  energy  can  be  further  converted  to  the  critical  charge  necessary  to  produce  upset 
(E,/22.5MeV/pC).  Fourth,  the  BGR  function,  BGR(E„,E,),  is  obtaned  for  the  calculated  recoil  energy  by 
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extracting  values  from  tabulated  BGR  data.  Fifth,  the  integration  of  Equation  7-3  is  performed  using  the 
difremntial  neutron  spectrum,  sensitive  volume,  and  BGR  values. 


As  the  flux  is  given  in  units  of  neutrons/cm^-sec,  the  upset  rate  has  umts  of  upset/sec-device  (or  bit),  but  his 
is  typically  converted  to  upsets  per  hour  or  day.  The  sensitive  thickness  can  be  comidered  to  consirt  of  three 
components:  the  depletion  region,  the  funnel  region,  and  the  diffusion  repon.  The  sensitive  thickness  m 
coUection  efficiency  were  determined  on  a  trial  and  error  basis  by  companng  calculat^  results  ag^st  the 
measured  upsets  tabulated  in  Table  6-1  on  page  6-12  for  the  various  neutron  tests.  Thus,  for  a  pven  test 
result,  several  thickness's  were  assumed,  the  BGR  methodology  steps  listed  above  were  earned  out  for  the 
appropriate  neutron  environment,  and  the  calculated  upset  rate  prediction  was  compared  with  the  measured 
upset  rate  to  select  the  appropriate  thickness  and  collection  efficiency.  This  process  is  desenbed  m  .  , 
“BGR  Upset  Rate  Model  for  64K  SRAM”  on  page  7-12. 


Inmos  IMS1601  Heavy  Ion  Test  Data 

It - - - - - - 


Effective  LET  {MeV-cm^2/mg) 


Figure  7-6.  Heavy  Ion  Cross  Section  for  64k  SRAM. 

In  actual  practice  we  found  that,  in  examining  heavy  ion  cross  section  curves  as  a  function  of  LET,  we  could 
not  easUy  identify  a  single  LET  threshold  for  the  entire  curve  that  would  not  be  overly  conseivative. 
Instead,  we  found  it  preferable  to  make  simplified  fits  to  the  cross  section  curve  that  ^  equivalent  to  two  or 
three  effective  thresholds,  each  of  which  has  a  corresponding  cross  section,  ^s  is  7-^ 

that  shows  the  actual  cross  section  curve  with  a  three-part  simplified  fit  for  the  SRAM,  the  lowest  LET 
threshold  is  4  MeV-cm^/mg  with  a  0.06  cm^  cross  section,  the  middle  LET  threshold  is  8  MeV-cm  /mg  with 
a  0.25  cm^  cross  section,  and  the  highest  effective  LET  threshold  is  16  McV-cm^/mg  with  a  0.6  cm  cross 
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section.  The  use  of  the  stair-step  fit  to  the  actual  heavy  ion  cross  section  curve  is  an  important  refinement 
over  the  description  of  a  single  effective  LET  threshold  described  in  Reference  49. 


To  assist  in  evaluating  Eq[7-4]  in  general  terms,  we  have  earned  out  the  ^  ® 

with  the  differential  neutron  flux  in  the  atmosphere  over  the  neutron  energy  range  of 

various  values  of  recoil  energy.  E,.  The  BGR  values  used  are  similar  to  those  m  References  49.  50  and  . 

The  resulting  curve  of  the  integral  of  BGR  with  dN/dE  is  shown  m  Figure  7-7  as  a  function  of  E,  and  is 

similar  to  one  presented  in  Reference  49  except  that  the  latter  is  expressed  as  a  function  of  critical  charge. 

in  units  of  pC  rather  than  E,  (E,(MeV)  =  22.5xQ<.  in  silicon). 


Integral  of  dN/dE  x  BGR(En,Er)  vs.  Er 


Figure  7-7.  Integral  of  dN/dC  x  BGR(En,Cr)  vs.  Er. 

As  indicated  above,  one  of  the  merits  of  the  BGR  method  is  that  heavy  ion  SEU  data  is  av^able  for  hun¬ 
dreds  of  microelectronic  devices  from  previous  testing.  To  utilize  the  BGR  method  m  order  ^  ^culate 
upset  rates  through  Eg[7-3].  we  need  to  know  two  key  parameters.  I,  the  sensitive  thickness  which  is  nred 
to  calculate  E,  aiS  V.  and  C.  the  collection  efficiency.  Neither  r  nor  C  arc  generally  known  for  the  hundreds 
of  devices  that  have  undergone  SEU  testing. 

In  this  study  our  purpose  is  to  calculate  the  upset  rate  at  aircraft  altitudes  accurately  in  order  to  comp^jj 
measured  values  For  many  applications  that  is  not  necessary;  a  conservative  estimate  of  the  upset  rate  will 
suffice.  We  know  from  experience  that  the  smaller  the  sensitive  thickness  the 

it  forces  E,  to  be  low  and  therefore  the  BGR  to  be  high  (see  7.5.  "BGR  Upset  Rate  Model  for  64K  SRAM 
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on  page  7-12).  Therefore,  for  parts  with  no  neutron  upset  data  to  verify  against,  we  recommend  usmg 
r=  and  C=  1  to  obt^  a  conservative  upset  rate. 


Following  Reference  52,  t  can  be  considered  as  comprised  of  three  parts:  the  depleaon  re^on,  a  fh 
region,  and  a  diffusion  region.  Based  on  values  typical  for  current  rmcrochips,  t  is  expected  to  be  2n 
laSer.  Thus,  using  a  value  of  l/xm  for  t  yields  a  conservatively  large  BGR  and  hence  a  conservative  upset 

rate. 


7.5  BGR  Upset  Rate  Model  for  64K  SRAM 

As  indicated  in  7.4,  “Upset  Rate  by  the  Burst  Generation  Method”  on  page  7-9,  we  “^nd  to  develop  the 
BGR  upset  rate  model  for  the  64K  SRAM  based  on  Eq[7-3]  and  the  three-part  fit  to  the  SEU  cross  section 

as  a  function  of  LET  shown  in  Figure  7-6  on  page  7-10. 

There  are  now  three  effective  sensitive  areas.  When  multiplied  by  the  sensitive  thiclmess  these  l»cornethrre 
effective  sensitive  subvolumes,  each  with  a  separate  LET  threshold.  Eq[7-3]  has  to  be  modified  to  reflect  the 
contributions  from  each  of  the  i  subvolumes: 


Upset  Rate  =  C^^6,Vi^BGR{,E„,Er>idNldE  dfj 


[7-4] 


Each  sensitive  subvolume  AV^  has  a  corresponding  LET  threshold.  Once  the  rensitive  thickness  t  is 
assumed,  not  only  are  the  sensitive  subvolumes  defined,  but  so  too  are  the  corresponding  buret  energies, 
With  the  AVi  and  E^  specified,  the  upset  rate  can  be  calculated,  (^culated  upset  rates  will  be  compared 
with  those  actually  measured  in  the  neutron  tests.  The  collection  efficiency  C  will  then  be  defined  as  the 
ratio  of  the  measured  to  calculated  upset  rates. 

This  is  a  different  approach  than  is  used  in  Ref.  49.  where  C  would  ordinarily  be  taken  to  be  1  in  order  to 
obtain  a  conservative  estimate  of  the  upset  rate.  In  our  case,  we  know  the  upset  rate,  or  in  this  case,  the 
number  of  upsets,  so  our  objective  is  to  obtain  an  accurate  estimate  rather  than  a  conservative  one. 

The  starting  point  for  the  procedure  is  the  sensitive  thickness,  t.  Following  Reference  52,  t  can  consid¬ 
ered  as  comprised  of  three  parts:  the  depletion  region,  a  funnel  region,  and  a  diffusion  repon.  Based  on 
values  typical  for  current  silicon  microchips,  t  is  expected  to  be  2nm  or  larger.  Using  a  value  of  ^ 
would  yield  a  conservatively  large  BGR  and  hence  a  very  conservative  upset  rate  In  the  case  of  the^ 
SRAM,  l^m  and  2/xm  are  stiU  considerably  too  smaU,  so  we  chose  three  larger  values  to  obtam  closer  agree¬ 
ment,  3.5,  3.8,  and  4.0/im. 

For  illustrative  purposes  we  apply  the  method  in  detail  to  the  test  “ 

Table  6-1  on  page  6-12.  This  was  with  the  SRAM  at  5  volts  being  exposed  to  the  14  MeV  neutron  gener¬ 
ic  fluence  was  4.14E9  n/cm^  and  836  upsets  were  recorded  in  all  28  chips.  Choosing 

t  =  3.5um.  we  obtain  E„  =  3.2MeV,  E,2  =  6.4MeV.  and  E,3=  12.8MeV.  The  maxmum  energy  th^  a 
14-15  MeV  neutron  can  produce  in  silicon  is  about  3.8  MeV,  so  only  recoils  of  E,!  3.2Me  ^  f- 

m  corresponding  volume  AV,  is  2.17E7Mm^  and  the  BGR  for  ,E„=lJ7MeV  is 
BGR(14  7  3  2)=  13.5E-16cmVAim"  for  the  essentially  mono-energetic  neutrons  (E.vg-  14.7MeV)  produced 
by  the  neutron  generator.  Thus  the  integral  in  nq[7-4]  is  replaced  by  point  values  for  the  nemron  flue^e 
Zd  BGR,  yielding  113.4  upsets  per  device  or  3175  upsets  for  all  28  devices.  To  cdculate  the  actual  number 
of  upsets  measured,  a  collection  efficiency  of  0.263  would  be  needed,  that  is,  836/31 

Stailar  calculation,  canied  out  To,  t.3,8  and  4.0um  and  for  the  42  and  M  MeV  pak 

tests.  For  the  42  and  64  MeV  neutron  sources,  an  adjustment  factor  has  to  he  used  to  account  for  upsets 
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induced  by  neutrons  in  the  low  energy  tail  of  the  spectrum.  Theoretically,  the  fartor 

vary  with  each  value  of  t,  because  the  recoU  energy  is  different  for  each  t.  In  practice,  though,  tins  v^atio 
is^all,  so  we  have  applied  the  adjustment  factor  for  t=  3.8^m  to  the  calculations  for  all  three  values  oft. 

The  results  are  tabulated  in  Table  7-1.  Figure  7-8  on  page  7-14  shows  the  ratio  of  calculated/measured 
upsets  for  each  of  the  three  tests,  as  well  as  the  average  for  the  three  tests.  It  is  cle^  from  Fipire  7-8 
vaas  7-14  that  t  =  3.8/im  gives  the  most  consistent  results  when  measurements  from  ^  three  neutron  sources 
are  considered.  This  becomes  especially  clear  when  the  cuive  for  the  average  of  aU  three  measurements  k 
examined,  and  account  is  taken  of  the  standard  deviation  between  the  t^e  sets  of 
Figure  7-8  on  page  7-14,  the  ratio  for  t  =  3.8/im  for  the  average  of  the  three  tests  is  1.81  and  therefore  the 

collection  efhciency,  C,  is  1/1.81  =  0.55. 


Table  7-1.  Variation  of  Calculatcd/Measured  Upsets  with  Sensitive  Ihick- 
ness. 

Calculated 

Upsets 

Ratio, 

Calc/Meas 

Upsets 

I /Ratio 

14.7  P 

tIeV  BPSRC  Source  (836  upscts/device  measured) 

3.5 

3175 

3.80 

0.263 

3.8 

1456 

1.74 

0.574 

4.0 

190 

0.227 

4.4 

641 

VIeV  UCD  Source  (13.6  upsets/device  measured) 

3.5 

20.3 

1.49 

0.670 

3.8 

17 

1.25 

0.8 

4.0 

14.7 

1.08 

0.925 

42  MeV  UCD  Source  (7.2  upscts/device  measured) 

3.5 

23 

3.19 

0.313 

3.8 

17.5 

2.43 

0.411 

4.0 

14 

1.94 

0.514 

t(/im) 

Average  Ratio 

Avg.+Std.  Dev. 
Ratio 

Avg.— Std.  Dev. 
Ratio 

2.83 

3.80 

1.85 

1.81 

2.29 

1.32 

1.08 

1.79 

0.383 
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Assumed  Sensitive  Thickness 

Effect  on  64k  SRAM  Upset  Calculations 


Figure  7-8.  Variation  of  Calculaled/Measured  Upsets  with  Sensitive  Thickness. 

Selection  of  3.8uni  as  the  sensitive  thickness  can  be  corroborated  in  another  way.  Pigure  7-6  on  page  7-10 
presents  the  heavy  ion  testing  performed  by  IBM.  The  lowest  LET  at  which  upsets  occurred  is  3 
MeVcmVmg.  However,  from  this  data  the  LET  threshold  cannot  be  detemuned;  all  we  can  o^se^e  is  that 
the  LET  threshold  is  ^3.  Fortunately,  separate  heavy  ion  testing  was  performed  on  this  s^e  64K  SRAM 
and,  as  reported  in  Reference  8,  the  LET  threshold  is  given  as  2  MeVem^/mg.  Using  the  absolute  LET 
threshold  of  2  MeVem^/mg  and  the  3.8/im  sensitive  thickness,  we  obtam  a  threshold  energy  deposition  of 
1.75  MeV,  which  is  equivalent  to  a  critical  charge  of  78  fC.  Taber  has  reported  several  estunates  of  the 
critical  charge  in  Reference  6.  Based  on  estimates  of  the  ceU  capacitance  and  signal  margin,  for  operation  at 
5  volts,  the  critical  charge  was  determined  to  be  between  73-130  fC,  in  good  agreement  with  our  estimate  of 
78  fC  based  on  neutron  induced  SEU  and  the  BGR  method. 

Having  determined  the  collection  efficiency,  the  BGR  upset  rate  model  for  the  64K  SRAM  is: 


“  2.28F7 

BGR(3.5,E„)(dNldE)dE 

Upset  Rate  =  0.55 

+  7.22E7 

BGR{l,E„){dNldE)dE 

+  1.33E8 

BGR{\A,E„)(dN\dE)dE  _ 
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7.6  Correlation  with  Flight  Results 


The  two  different  models  to  calculate  the  upset  rate  induced  by  atmospheric  neutrons  in  the  64K  SRAM 
were  described  in  7.3,  “Upset  Rate  by  Neutron  Cross  Section  Model”  on  page  7-8  and  7.4,  “Upset  Rate  by 
the  Burst  Generation  Method”  on  page  7-9.  In  Section  3.  “IBM  Flight  Experimental  Data”  on  page  3-1 
and  Section  4,  “Military  Avionics  Field  Data”  on  page  4-1,  we  presented  the  actual  flight  data  recorded. 
We  now  would  like  to  compare  the  calculated  upset  rates  against  the  rates  actually  measured  in  flight.  This 
comparison  is  made  in  Table  7-2  on  page  7-16. 

Eq[7-2]  provides  the  model  for  the  neutron  cross  section.  All  calculations  were  carried  out  for  the  differen¬ 
tial  neutron  flux  at  40,000  feet  and  45‘’N  latitude,  i.e.  pven  by  Eq[7-1].  When  the  integration  required  by 
Eq[7-2]  is  carried  out,  we  obtain  an  upset  rate  of  3.28E-9  upsets/bit-hour,  which  applies  at  45”N  latitude 
and  40,000  feet.  From  Figure  7-2  on  page  7-3,  we  obtain  a  normalization  factor  of  0.4  for  the  atmospheric 
neutron  flux  at  29,000  feet  compared  to  that  at  40,000  feet.  Thus,  for  European  Area  2,  the  calculated  upset 
rate  is  1.3E-9  upsets/bit-hour. 

For  European  Area  1,  which  we  have  taken  to  be  at  an  average  latitude  of  55“  N,  the  additional  normaliza¬ 
tion  factor  for  latitude  is  obtained  from  Figure  7-3  on  page  7-4  (value  of  1.37).  Thus,  for  European  Area  1, 
the  upset  rate  is  1.8E-9  upsets/bit-hour. 

For  the  BGR  method,  a  similar  procedures  was  used.  Eq[7-5]  presents  the  model  and  Figure  7-7  on 
page  7-1 1  contains  the  values  of  the  integral  of  BGR  with  dN/dE.  After  the  integrations  are  performed,  the 
upset  rate  obtained  is  5.8E-9,  which  appUes  at  45“N  latitude  and  40,000  feet.  We  again  use  the  same  nor¬ 
malization  factors  as  above,  0.4  for  an  altitude  of  29,000  feet  and  1.37  for  a  latitude  of  55“N,  to  obtam  the 
corrected  values  listed  in  Table  7-2  on  page  7-16. 

All  the  aforementioned  applies  to  the  5  volt  operating  mode.  When  the  64K  SRAM  is  operated  at  2.5  volt 
standby,  it  is  more  susceptible  to  upset.  From  Table  6-1  on  page  6-12,  the  increased  susceptibility  is  a 
factor  of  3.8  based  on  the  42  MeV  pwk  neutron  test  and  3.0  for  the  64  MeV  peak  neutron  test.  Thus  we 
will  use  an  average  factor  of  3.4  for  the  increased  susceptibility  for  2.4  volt  standby  operation  compared  to 
achieve  5  volt  operation.  This  value  of  3.4  is  very  close  to  the  3.5  scaling  factor  that  was  previously  obtained 
[Ref.  3]  as  described  in  3.5,  “Dosimetry”  on  page  3-6.  This  enables  us  to  calculate  the  upset  rate  for  the 
low  altitude  (29,000  feet  elevation)  measurements  described  in  3.3,  “Low-Altitude  Measurements  on 
page  3-3. 
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Table  7-2.  Comparison  of  Calculated  to  Actual  Upset  Rates.  Calculated  versus  actual  « 
rates  are  compared  for  static  RAMs  at  aircraft  altitudes. 

icorded  upset 

SRAM 

Type 

Oper¬ 

ating 

Voltage 

(V) 

Flight 

Lati¬ 

tude 

(degrees) 

Average 

Latitude 

Assumed 

(degrees) 

Flight 

Altitude 

(ft) 

Measured 

Upset 

Rate 

(upsets/ 

bit-hr) 

Rate 

Calc. 

w/NCS 

Method 

(upset/ 

bit-hr) 

Rate 

Calc. 

w/BGR 

Method 

(upsets/ 

bit-hr) 

64k 

5 

54-60 

55 

29k 

2.26E-9 

1.80E-9 

3.20E-9 

64k 

5 

44-50 

45 

29k 

1.57E-9 

1.30E-9 

2.30E-9 

64k 

2.5 

39-48 

45 

29k 

5.00E-9 

4.40E-9 

7.90E-9 

64k 

2.5 

32-40 

35 

65k 

l.lOE-8 

9.70E-9 

1.75E-8 

64k 

2.5 

59-82 

70 

65k 

2.25E-8 

2.30E-8 

4.16E-8 

256k 

2.5 

59-82 

70 

65k 

4.60E-9 

8.20E-9 

1.36E-8 

Notes: 

1.  Calc 

2.  The 

mea 

3.  The 
dor's 
iden 

ulated  upset 
256kxl  NC 
sured  with  8 
256kxl  BG 
32kx8  SR 
tical  to  that 

rates  are  scaled  to  altitude  and  average  latitude. 

S  calculation  is  based  on  the  64k  results,  normalized  by  upset  cross  sections 
00  MeV  protons. 

tR  calculation  is  based  on  a  heavy  ion  cross  section  curve  for  the  same  ven- 
AM,  and  assumed  a  sensitive  thickness  of  3|im  and  a  collection  efficiency 
for  the  64k  SRAM. 

For  the  64K  SRAM  measurements  recorded  on  the  ER-2  flights  (at  65,000  feet),  we  need  different  normal¬ 
ization  factors.  For  65,000  feet  altitude,  it  is  1.4,  rather  than  0.4  for  29,000  feet.  For  the  latitude  normahza- 
tion  factor  from  Figure  7-3  on  page  7-4,  it  is  0.63  for  35®  latitude  and  1.5  for  70  latitude. 


For  the  256k  SRAM,  the  only  actual  SEU  test  data  we  have  is  for  a  single  proton  test  at  LAMPF  with  800 
MeV  protons  [Ref.  13],  the  data  for  which  is  contained  in  Table  6-1  on  page  6-12.  It  was  obtamed  with 
the  SRAM  operating  at  2.5  volts,  just  as  the  64k  SRAM  was  tested.  If  we  use  the  800  MeV  proton  upret 
cross  section  as  a  means  of  normalizing,  we  may  utilize  the  neutron  cross  section  model  to  calculate  the 
upset  rate.  For  the  64k  SRAM,  we  showed  above  that  the  neutron  cross  section  model  gives 
3  28E-9xl  4xl.5x3.4=  2.3E-8  upsets/bit-hr.  Applying  this  to  the  256k  SRAM,  and  normalizmg  by  the  800 
MeV  upset  cross  section,  we  obtain  2.34E-8xl.77E-12/5.06E-12=  8.2E-9  upsets/bit-hr,  which  is  less  than  a 
factor  of  two  higher  than  the  measured  value. 


The  BGR  method  may  also  be  used  to  calculate  the  upset  rate  in  the  256k  SRAM,  but  m  a  more  mdirect 
manner  There  is  data  available  for  a  similar  256k  SRAM  from  the  same  vendor  (32kx8  orgai^ation  and 
1.3um  feature  size  compared  to  the  256kxl  organization  and  l.l^xm  feature  size  of  the  SRAM  that  was 
flown).  Figure  7-9  on  page  7-17  shows  the  SEU  cross  section  as  a  function  of  LET  curve  for  the  32kx8 
SRAM  as  measured  by  Koga  et  al  [Ref.  53],  along  with  our  simplified  fit  ^ot^e  curve,  n^ely:  lowest  LET 
threshold  of  2  MeVem^/mg  with  a  cross  section  of  lE-3  cm^,  middle  LET  threshold  of  4  McVot  /mg^with 
a  cross  section  of  0.1  cm^  and  highest  LET  threshold  of  12  MeVem^/mg  with  a  cross  section  of  0.3  cm  . 
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EDI  32kx8  SRAM  SEU  Cross  Section 
Aerospace  Corp.  Data 


Figure  7-9.  EDI  32M  SRAM  H^.y  lo»  Up™.  Cro»  S.cOon.  The  EDI  32kx8  SRAM  I.  simll.r  lo  Ih.  EDI 
256kxl  SRAM  flown  over  Norway  in  this  study. 

We  have  no  actual  data  to  aUow  us  to  calculate  the  sensitive  thickness,  so  we  estimate  as  ^7" 

1^7  5%GR  Unset  Rate  Model  for  64K  SRAM”  on  page  7-12,  the  sensitive  thiclmess  for  the  64k  SRAM 

is  i  Vam.  This  is  a  mid-1980's  part  and  its  sensitive  thickness  is  about  4,im.  We  have 

1  •  r.  -1  SRAM  FRef  541  a  1990's  era  part,  and  found  its  sensitive  thickness  to  be  about  2;im. 

FoiAe  256k  SRAM  a  Utt  I980's  part,  we  will  aioume  the  sensitive  thickness  to  be  approrimately  imdiray 
S^n,  i.e  t- Sum  We  will  teher  assume  that  the  colleetion  effieieney  is  smnlar  to  that  Tor  the  64k 

SRAM,  C  =  0.55. 

Thus,  for  t  =  3,un,  we  obtain  the  foUowing  BGR  method  upset  model  for  the  256k  SRAM: 


3£’5 J  BGR{  1 .4MeV,£„)(</A  ldE)dE 
Upset  Rate  =  0.55  -I-  3£7j BGRi2.m^^/,E„)^dN|dE)dE 

+  6EjjBGR{%.meY,E„)(dNldE)dE 


[7-6] 


After  the  integnttions  are  earned  out,  the  upset  rate  obtained  is  1.9B-9  7“f 

latitude,  40,000  feet  and  the  full  5  volt  operating  voltage.  Using  normalization  fac 


Section  7.  Neutron  Upset  Model  7-17 


Unclassifled 


1.5  for  the  latitude,  and  3.4  for  the  2.5  volt  operation,  we  obtain  a  calculated  upset  rate  of  13.6E-9 
upsets/bit-hr,  which  is  almost  a  factor  of  three  higher  than  the  measured  value. 

Considering  A.  1-ge  »no««inries  in  riri,  pariicuW 

tip<!  inrliide  use  of  an  SEU  cross  section  curve  for  a  different,  althougn  simuar,  y  „ 

r.^^l^.lrick„e.s  based  on  gen..al  bends  in  SRAM  simetub,  «.d  an  assnmed  eoUeerion  effl- 

ciency  identical  to  that  for  the  64k  SRAM. 

,te  .he  .wo  differ.  n.e.hods  give  - W  TintoS^v:  W 

n'^n.  .0  addirion.  ri.e  nK^nsed  daU  fo,  rise  256h  SRAM  is  also 
poorer,  since  only  6  upsets  were  measured  on  the  14  flights  out  of  Norway. 
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Section  8.  Impact  on  Current/Future  Avionics 

The  real  payoff  in  this  research  is  in  knowing  how  to  better  specify  and  design  future  avionics  equipnieirt  to 
be  less  susceptible  to  NSEU.  Consequently,  the  model  and  knowledge  gained  in  this  work  were  apphed  to 
predict  the  sensitivity  of  future  devices  and  systems. 


8.1  Effect  of  Memory  Size 

The  total  amount  of  semiconductor  memory  on  board  an  aircraft  is  a  key  factor  in  determi^g  what  kiiid  of 
a  problem  neutron-induced  SEU  will  cause  for  an  avionics  system.  This  is  clearly  seen  in  Figure  8-1  on 
page  8-2,  in  which  the  number  of  memory  bits  per  aircraft  are  plotted  against  the  mean  time  to  fail 
(MTTF).  Figure  8-1  on  page  8-2  is  based  on  an  SEU  upset  rate  of  2.3E-9  upsets/bit-hour  for  5  volt  opera¬ 
tion.  It  is  taken  from  Table  7-2  on  page  7-16  and  appUes  to  flight  at  an  altitude  of  29,000  feet  and  a  lati¬ 
tude  of  55°  (atmospheric  neutron  normalization  factors  of  0.4  and  1.37).  It  serves  as  a  representative  flight 
path  only. 

Similarly,  we  have  somewhat  arbitrarily  assumed  that  an  upset  rate  of  more  than  one  per  flight  would  be 
noticeable  but  that  less  than  one  per  flight  would  not.  This  is  based  on  our  expenence  m  collecting  avionics 
field  reliability  data,  in  which  memory  alterations  potentially  attributable  to  NSEU  are  difficult  to  septate 
from  memory/system  errors  due  to  other  causes  such  as  power  supply  fluctuations,  electromagnetic  mterfer- 
ence,  or  software/procedure  errors. 

The  point  of  the  curve  is  that,  as  the  total  memory  density  increases,  the  mean  time  between  upsets 
decreases  and  we  can  easily  reach  a  situation  of  1-2  hours  per  upset  for  a  memory  of  approximately  0.2-0.4 
Gbit.  Of  course  this  applies  only  to  unprotected  memory.  For  memory  protected  by  EDAC,  the  mean  tune 
between  upsets  increases  enormously,  as  discussed  in  9.2,  “Fault  Tolerance”  on  page  9-2.  It  also  very  signif¬ 
icant  that,  on  a  per-bit  basis,  there  is  not  very  much  difference  in  susceptibility  to  SEU  for  the  same  type  of 
commercially  available  memory  technology,  in  this  case  NMOS  four-transistor  cells.  Koga  in  Referenre  11 
performed  heavy  ion  testing  on  12  different  commercially  available  NMOS  SRAMs  and  all  but  one  exhibited 
very  similar  SEU  sensitivity. 
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Avionics  SRAM  Memory  Density 

(MTTF  based  on  64kx1  SRAM  at  SOkft,  5V) 
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Figure 


8-1.  Avionics  MTTF  Versus  Memory  Size.  As  density  increases,  the  mean  Ume  between  upsets  will  decrease. 


8.2  Effect  of  Altitude 

Military  avionics  designers  should  note  that  atmospheric  neutron  single  f ^ 
increSng  altitude.  This  is  seen  convincingly  in  Figure  8-2  on  page  8-3,  which  shows  the  SEU  rate  as  a 
function  of  altitude,  and  Figure  8-3  on  page  8-4,  which  shows  the  SEU  rate  as  a  function  of  lati  _ 

[he  altitude  variation,  the  IBM  flight  experimental  data  from  Table  the 

militarv  avionics  field  data,  since  the  latter  were  all  conducted  at  one  altitude.  The  shape  of 
uosimte  in  the  64k  SRAM  operated  at  2.5  volts  as  a  function  of  altitude  is  m  excellent  agreement  with  the 
l!^0  MeV  atmospheric  neutron  flux  curve.  This  is  further  verification  of  the  energetic  atmosphenc  neutrons 

as  the  cause  of  the  upsets. 
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Soft  Error  Rate  vs  Altitude 

64k^56k  NMOS/CMOS  SRAM 


■s 

Q> 


Figure 


8-2.  Avionics  SEU  Rate  vs  Altitude.  Doth  the  neutron  flux  and  sofi  error  rates  increased  with  altitude. 


8.3  Effect  of  Latitude 

Soft  error  rates  wiU  also  tend  to  increase  with  increasing  latitude.  For  the  latitude  variation,  Jhe  IBM 
flight  experimental  data  at  2.5  volts  and  the  military  avionics  field  data  at  5  volts  are  useful,  but  ^o^h 
up^t  rates  at  only  two  latitudes.  Nevertheless,  the  slope  of  the  the  two  partial  upset  curve  Imes.  at  2.5  volts 
and  5  volts,  are  in  good  agreement  with  the  shape  of  the  atmospheric  neutron  flux  curve  as  a  function  as  a 
function  of  latitude.  This  again  corroborates  our  identification  of  the  atmosphenc  neutrons  as  the  cause  of 

the  upsets. 
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8.4  Effect  of  Multi-Bit  Upsets 


When  implementing  soft  error  protection,  designers  should  also  consider  the  potential  impact  of  multi-bit 
upsets.  As  described  in  3.4.2  and  5.2,  there  have  been  several  instances  where  two  or  more  upsets  appear  to 
have  occurred  simultaneously  (i.e.  in  known  physically  adjacent  cells  or  within  the  same  time  measurement 
interval.  Such  bursts  of  upsets  may  overwhelm  a  soft  error  protection  scheme  if  considerations  aren't  made 
in  the  initial  design  (see  Section  9,  “Hardening  Strategies”  on  page  9-1). 

Our  limited  data  indicates  that  multi-bit  upsets  may  account  for  up  to  2%  of  the  total  events  at  teth  29,000 
feet  and  65  000  feet.  These  are  neutron  induced  double  bit  upsets.  They  can  be  compared  to  the  multiple 
bit  upsets  induced  by  heavy  ions  of  relatively  low  LET  (15<LET)  because  of  the  similar  energy  deposition 
between  these  ions  and  the  neutron-induced  recoils.  We  described  in  5.2  multiple  bit  upset  measurements  in 
three  different  1Mb  SRAMs  that  indicated  the  multi-bit  upsets  comprise  about  2%,  10%,  ^d  20 /o  of  ^ 
events  in  the  three  devices.  We  noted  the  apparent  wide  variation  in  sensitivity  to  multi-bit  upset  for  the 
same  type  of  memory  technology. 

The  Space  Shuttle  multiple  upsets  are  interesting.  However,  because  most  upsets  are  caused  by  the  heai^ 
ion  portion  of  the  galactic  cosmic  rays  (GCR)  and  some  by  the  trapped  protons  in  the  South  Atlanbc 
Anomaly,  the  frequency  of  these  multiple  events  can  only  serve  as  a  general  guide  for  similar  effects  at 
craft  altitudes.  For  example.  Table  5-1  on  page  5-3  shows  that  the  higher  inclination  orbits,  for  which  the 
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GCR  is  more  important,  have  the  higher  multiple  bit  frequencies  (average  of  7%  compared  to  1.5%  at  lower 
inclination. 

Uttle  is  known  about  the  physical  distribution  of  such  upsets.  We  expect  that,  in  most  cases,  simultaneous 

upsets  would  involve  physicaUy  adjacent  memory  cells.  An  mstance  of  two  adjacent  “Us 

noted  on  the  return  of  one  of  the  64k  SRAM  boards  from  flights  over  Norway  (see  S^ton  3).  However, 

we  did  not  have  a  time  history  to  show  that  the  two  upsets  occurred  simultaneously.  The  two 

the  miUtary  avionics  flights  (see  Section  4)  were  known  to  be  coincident  m  time,  but  we  have  not  yet  tra 

the  lopcal  computer  memory  addresses  back  to  the  correspondmg  physical  devices/cells. 

There  are  at  least  two  cases  for  the  64k  SRAM,  however,  where  we  are  certain  that  simult^eous  upsets  did 
not  occur  in  adjacent  ceUs.  These  were  on  Space  Shuttle  flight  STS-48  (see  Section  5)  and  s^^ 

taneous  upsets  in  separate  computers.  Such  an  instance  is  thought  to  be  very  ««  and  ^  ^ 

ions,  so  it  is  not  expected  to  apply  at  aircraft  altitudes.  However,  it  is  presented  here  to  mdicate  that  such  a 

possibility  exists. 

For  now,  avionics  designers  may  assume  that  most,  but  not  aU,  m^ti-bit  upset  bursts  involve  <=1“^ 
or  more  ceUs  in  a  veiy  localized  area  (usually  the  same  chip).  This  would  not  cause  PJ°^  . 

designs  using  one-bit-wide  memory  devices,  since  multiple  upsets  on  the  same  chip  would,  by  defimtion, 
appear  at  different  addresses  and  not  cause  multiple  bits  to  fail  in  a  smgle  output  word. 

However,  those  designs  using  greater  than  one-bit-wide  memory  devices  (such  as  x4, 

consider  the  chance  that  a  cluster  of  two  or  more  upsets  in  the  array  could  P^opagate  ^  ^ 

word  and  overwhelm  a  single-bit  soft  error  protection  scheme.  Furthermore,  based  on  ^ 

5  2  this  effect  has  been  seen  in  commercially  available  1Mb  SRAMs,  and  the  percentage  of  the  total  num^r 
of  upsets  ranges  from  at  least  2-20%  for  relatively  low  LET  ions.  We  beUeve  that  these  ^ 

apply  to  neutron-induced  multiple  bit  upsets  in  the  same  devices.  More  explicitly,  having  ® 
cross  section  curve  as  a  function  of  LET  such  as  Figure  5-2  allows  us  to  calculate  the  multiple  bit  upset  rate 
at  aircraft  altitudes  by  means  of  the  BGR  method. 

The  chance  of  multiple  upsets  occurring  will  be  dependent  on  the  array  topolop  of  the  memory  devires. 
Koga  [Ref  11]  has  shown  that  some  static  RAM  memory  devices  have  such  tight  column  mterleavmg  that 
upsets  in  physically  adjacent  ceUs  of  the  same  row  wiU  always  propagate  to  the  same  output  word.  Other 
memory  devices  are  designed  with  eight  or  more  cells  separating  those  m  the  same  word,  so  that  the  chance 
of  multiple  faults  in  the  same  output  word  is  greatly  reduced. 
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Section  9.  Hardening  Strategies 

Soft  e™,  hantening  stntegigs  c».  genaraUy  divided  into  two  type*;  fault  avoidance  and  fault  toleranee. 
These  are  discussed  below. 


9.1  Fault  Avoidance 

Fault  avoidance  involves  pteventing  faults  Iron,  happening  in  the  fust  place,  as  opposed  to  n»overing  from 
them  once  they've  occurred. 

9.1.1  Circuit  Hardening 

Effor«  h,  protect  senuconductor  circuitry  front  the  effect,  of 

environments  have  resulted  in  the  development  o  f.iterine  of  SEU  transients.  Many  of  these 

eL'tiate  nTeU.  but  the  cost  and  availability  of  such  hard¬ 
ened  parts  may  preclude  their  use  on  a  typical  avionics  system. 

9.1.2  Component  Selection 

nique  has  been  used  to  reduce  heavy  ion  soft  error  rates  on  the  Space  Shuttle  General  Purpose  uomp 

9.1.3  Shielding 

Uds  for  gamma  ray  protection,  etc.).  However,  shielding  is  not  expected  to  a  p  ^ISOMeVl  are 

soft  error  rate. 

With  .he«  very  high  energy  neutron,,  the  tall  off  ut  the  Ilux  »  —  - 

iSuiroftouS  ™rgy  neutron,  i,  primly  d™  to  llSofSI'™ 

whh  «  to  r!:  ? U  impractical  in 

l^rJSng  as  a  ffueii  on  an  airplane.  (To  ffrield  a  6-x6-xl0' avionic,  box  would  reuuue  nx  alurmnum 
slabs,  each  about  26'  deep,  with  a  combined  weight  of  more  than  800  pounds). 
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9.2  Fault  Tolerance 

A  more  likely  candidate  for  NSEU  hardening  is  the  use  of  fault  tolerance.  Fault  tolerance  involves  the  use 
of  redundancy  to  allow  a  system  to  continue  functioning  during  or  after  a  NSEU.  It  relies  on  the  assump¬ 
tion  that  NSEU  is  not  likely  to  occur  simultaneously  in  widely  separated  locations  (physical  redundancy)  or 
that,  if  an  operation  is  repeated  (time  redundancy),  a  second  NSEU  will  not  occur  in  exactly  the  same 
manner. 

In  practice,  fault  tolerance  can  be  implemented  at  many  different  levels,  including  chip,  card,  box,  and 
system.  A  fault  tolerant  design  may  also  involve  the  use  of  firmware,  software,  and  procedures  to  recover 
from  errors.  In  the  following  sections,  we  discuss  some  of  the  most  common  types  of  fault  tolerance  that  are 
implemented  for  memory  arrays. 

9.2.1  Single-Error  Detection  With  No  Correction 

One  of  the  most  common  types  of  memory  fault  tolerance  is  the  use  of  parity  checking  in  h^dware,  coupled 
with  recovery  mechanisms  in  firmware,  software,  or  procedures.  The  reason  for  parity  checking  s  widespread 
use  is  its  simplicity  and  speed.  It  requires  as  little  as  one  extra  bit  per  word. 

Parity  checking  can  be  either  "odd"  or  "even."  In  "odd"  parity  checking,  the  parity  check  bit  is  adjusted  so 
that  there  is  an  odd  number  of  Ts  in  word.  In  "even"  parity  checking,  the  parity  bit  is  adjusted  for  an  even 
number  of  I's.  An  example  of  a  nine-bit  odd  parity  checker  is  shown  in  Figure  9-1. 


Data  Bits  Check  Bit 
10101100  1 

0  1  0  0  0  1  0  1  0 

00000101  1 


Figure  9-1.  Example  of  Nine-Bit  Odd-Parity  Checker. 

Some  of  the  disadvantages  of  single-bit/word  parity  checking  are  that  it  can  not  detect  an  even  number  of 
errors  (such  as  2,  4,  6,  etc.)  and  that  it  doesn't  provide  any  means  of  correcting  the  error.  Therefore,  some  of 
the  concerns  in  implementing  it  are: 

1 .  How  often  will  higher-level  recovery  procedures  have  to  be  invoked  (performance  impact)? 

2.  How  often  will  undetectable  errors  occur  (safety  impact)? 

The  frequency  with  which  soft  errors  arc  observed  and  subsequently  have  an  impact  on  performance  will 
depend  on  the  radiation  envirorunent,  the  size  and  sensitivity  of  the  memory,  and  the  way  in  which  the 
memory  is  used.  If  all  (100%)  of  the  memory  is  used  and  it  is  read  much  more  frequently  than  the  time 
between  errors,  then  the  mean  time  between  observed  errors  will  be: 


Data 


Error 


Section  9.  Hardening  Strategies  9-2 


Unclassified 


®  X^xrxc 


[9-1] 


where 


tg  =  mean  time  between  observed  errors  (in  days); 

Xg  =  single-bit  upset  rate  in  fails/bit-day; 
r  =  number  of  rows  (memory  depth);  and 
c  =  number  of  columns  (word  width,  including  parity). 

For  example,  a  lMx32  array  with  one  parity-check  colunm  would  have  1,048,576  rows  and  33  columns.  If 
the  single-bit  upset  rate  were  lE-7  f/bd,  the  mean  time  between  events  would  be  0.29  days,  or  once  every  6.9 
hours. 

The  chance  /?„  of  no  events  during  a  mission  of  time  would  be: 

=  [9-2] 


where 


R„  =  probability  of  no  events;  and 
=  mission  time  in  days. 

For  example,  if  the  above  memory  array  was  flown  on  a  five-hour  mission,  the  chance  of  no  events  would 
be  less  than  half,  or  0.49.  Factors  such  as  these  must  be  consider^  where  the  recovery  procedures  are 
'painful,'  such  as  requiring  a  pilot  to  manually  re-boot  a  system  each  time  an  error  is  detected. 

9.2.2  Double-Error  Detection  With  Single-Error  Correction 

Another  popular  soft  error  protection  technique  is  the  use  of  single-error-correction/double-error-detection 
(SEC-DED)  coding.  This  technique  employs  a  Hamming  [Ref.  57]  distance-4  code,  usually  optimized  for 
minimum  gate  delay  as  in  Hsiao's  odd-column-weight  code  [Ref.  58].  See  Reference  59  for  a  survey  of 
various  SEC-DED  coding  techniques. 

An  example  of  a  4Mx32  memory  array  with  SEC-DED  coding  is  shown  in  Figure  9-2  on  pag^-4  Each 
32-bit  wide  data  word  requires  seven  extra  check  bits  to  perform  the  SEC-DED  operation.  These  extra 
check  bits  are  supplied  by  expanding  the  memory  array  to  4Mx39  (22%  increase  in  size). 

On  write  operations,  a  7-bit  check  word  is  generated  (based  on  the  incoming  32-bit  data  word)  and  in 
memory.  On  read  operations,  another  7-bit  check  word  is  generated  (based  on  the  outgoing  32-bit  data 
word)  and  compared  with  the  7-bit  check  word  previously  stored  in  memory.  If  there  is  a  mismatch,  then 
one  or  more  errors  have  occurred.  If  it  is  a  single-bit  error,  the  circuitry  will  invert  the  flipped  bit  and  output 
correct  data.  If  it  is  a  detectable  multi-bit  error,  the  circuitry  will  provide  an  error  flag  mdicatmg  that  the 
data  is  uncorrectable. 

Our  basic  quantitative  assumption  about  single-bit  soft  errors  is  that  they  w:  exponentially  distributed.  That 
is,  the  probability  that  a  sin^e-bit  soft  error  has  not  occurred  after  time  t  is  equal  to  e--**,  where  X  is  the 
average  single-bit  soft  error  rate.  We  can  then  calculate  the  soft  error  reliability  of  a  SEC-DED  protected 

system. 
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Data  Error  Mult  Error 


Data  Bits  Check  Bits 

00000000000000000000000000000000  0011000 
00000000000000000000000000000001  1100001 
00000000000000000000000000000010  0010001 
00000000000000000000000000000011  1001101 
00000000000000000000000000000100  0010101 
00000000000000000000000000000 101  1001101 


Figure  9-2.  Example  of  32-Bit  SEC-DED  Configuration.  Single  error  correction/double  error  detccUon 

can  be  added  to  a  32-bit  wide  memory  array  using  7  extra  check  bits  per  word  (22 /o  addiUonal 

memory). 


First,  we  examine  one  word  of  memory.  Each  individual  bit  has  a  chance  p  of  experiencing  a  soft  fail  equal 
to 


1  -  e 


-Xt 


[9-3] 


where 


yl  =  bit  soft  error  rate  in  fails/bit-day;  and 
t  =  time  in  days. 


Therefore,  the  chance  Pf(I)„  of  exactly  one  soft  fail  in  a  memory  word  would  be  equal  to 


=  'a 


[9-4] 


where 


n  =  number  of  bits  in  the  word. 

Similarly,  the  chance  Pf(l)^  of  zero  soft  faUs  in  a  memory  word  would  be  equal  to 

/y(o)w= (I -/»)”• 


[9-5] 


Then,  the  combined  chance  Pf(0,l)^  of  zero  or  one  soft  fails  in  a  word  (correctable  error  situation)  would 
be 


[9-6] 


Since  we  assume  that  single-bit  soft  fails  occur  independently  in  each  word  of  rnernory,  then  the  array  reli¬ 
ability  R  would  be  equal  to  the  combined  chance  Pf(0,l),  of  zero  or  one  soft  fails  m  all  words  of  memory, 


or 
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R = PAOA)a = [/y(o.i)X = [(1  -  "y 


+  ne 


—Xt(n  -  l)jw 


[9-7] 


where 


w  =  the  number  of  words  in  the  memory  array. 


The  mean  time  to  fail  {MTTF)  for  soft  fails  would  be 


MTTF= 


- 1 


-ln[Pmi)J 


wln[(l-n)e-^'"  +  ne-'‘'<''-'>] 


[9-8] 


The  above  equations  apply  for  a  SEC-DED  coding  scheme  without  scrubbing  capabiUty.  For  example,  if 
we  assume  that  the  memory  array  shown  in  Figure  9-2  on  page  9-4  is  flown 

memory  device  technology  with  a  soft  fail  rate  of  lE-7  f/bd  at  ^“tu^e  (w=4,  94^04,  n-39,  2-1E-7 
t=0.2S.  then  the  reUability  R  would  be  equal  to  0.999998  and  the  MTTF  would  be  approximately  352 

years. 

The  advantage  of  SEC-DED  coding  can  be  seen  when  we  examine  what  happens  without  it.  In  the  case 
above,  if  only  parity  error  detection  were  used  («=  33  instead  of  39),  any  single  soft  error  would  be  uncorrec- 
table.  Unless  some  means  of  recovering/reloading  memory  existed,  there  would  only  be  about  a  three 
percent  chance  of  completing  the  mission  without  a  fail  (/?=  0.031420)  and  the  MTTF  would  be  an  average 

of  1.7  hours. 

Figure  9-3  on  page  9-6  shows  graphically  the  probability  of  success  (R)  for  the  above  exa^les^  a  func¬ 
tion  of  soft  error  rate.  Three  important  points  are  to  be  made.  First,  the  use  of  SEC-DED  codmg  alone 
provides  a  significant  (3-4  orders  of  magnitude)  improvement  in  soft  error  rate 

error  rates  we've  measured  on  the  64k  SRAM  at  29kft  clearly  dictate  the  necessity  for  SEC-DED  cod^mg  or 
some  simUar  means  of  protection  on  a  memory  array  of  this  size.  Fmally,  if  other  types  of  memory  devices 
have  soft  upset  rates  within  1-2  orders  of  magnitude  of  our  measurements,  the  same  conclusions  will  still 

apply. 


9.2.2.1  Soft  Error  Scrubbing 

The  reliability  of  memory  arrays  having  SEC-DED  code  can  usually  be  improved  by  periodically  "scrubbing' 
the  contents  to  remove  any  single-bit  errors.  This  helps  reduce  the  chance  that  single-bit  errors  will  accumu¬ 
late  to  the  point  where  they  overwhelm  the  EDAC  (>1  error  in  one  or  more  words). 

An  example  of  a  system  with  soft  error  scrubbing  is  the  IBM  APIOIS  General  Purpose  Computer  used  on 
the  U  S  Space  Shuttle.  The  Space  Shuttle  .system  uses  five  computers,  each  containmg  four  128kx23  static 
RAM  memory  arrays  that  are  scrubbed  every  1.678  seconds.  Without  scrubbing,  it  is  Ukely  that  there  would 
have  been  a  multiple  fault  alignment  on  at  least  one  of  the  missions,  smce  there  have  ^n  31  to  161  upsets 
per  mission  at  the  time  of  this  writing.  To  date,  the  SEC-DED  code  and  scrubbing  have  successfuUy  cor¬ 
rected  all  upsets. 

The  reliability  R  (chance  of  no  uncorrectable  errors)  for  a  SEC-DED  system  with  scrubbing  is  equal  to 

Wt 

=  [-(,  _  [9  "  9] 


where 
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n  =  number  of  bits  in  parity  word; 

=  soft  error  rate  in  fails/bit-day; 
tj  =  scrub  time  interval  in  days; 
w  =  number  of  words  in  array;  and 
=  mission  length  in  days. 

It  foUows  that  the  mean  time  to  fail  (MTTF)  for  multiple  fault  alignment  is  equal  to: 


[9-10] 


9.2.2.2  Multi-Bit  Upsets 

In  order  to  circumvent  the  problem  of  multi-bit/chip  upsets  descried  in  Section  8,  "Impaci  on 
Current/Future  Avionics”  on  page  8-1,  it  is  suggested  that  eaeh  memory  device  output  be  wired  to  a  ka¬ 
rate  EDAC  circuit  so  that  no  more  than  one  upset  can  occur  per  word.  See  Reference  60  for  more  informa¬ 
tion  on  this  approach. 
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9.2.2.3  On-Chip  Error  Correction 

Thete  has  been  a  trend  towards  inserting  more  testability  and  error  detection  features  directly  onto  logic  and 
memory  chips.  In  one  case,  SEC-DED  coding  has  been  incorporated  directly  into  a  16  megabit  dynamic 
RAM  to  improve  its  manufacturability  [Ref.  61]. 

Such  on-chip  error  correction  features  should  dramatically  improve  the  soft  error  reliability  of  these  devices 
when  used  in  systems  without  external  ECC.  However,  it  is  cautioned  that,  if  there  are  any  sin^e-bit  m^u- 
facturing  defects  on  the  chip,  then  those  particular  memory  words  would  not  be  protected  against  an  addi¬ 
tional  soft  error.  For  instance,  if  1000  bits  out  of  a  total  16,777.216  bits  had  hard  fails,  then  1000  words 
would  be  improtected  against  further  hard  or  soft  fails.  This  means  that  a  soft  upset  in  any  of 
137-bits/wordx  1000-words  =  137,000-bits  would  cause  an  uncorrectable  error. 

It  is  recommended  that,  if  on-chip  error  correction  is  used  to  replace  external  error  correction  circuitry  in 
avionics  designs,  that  devices  be  screened  to  select  only  those  with  no  single-bit  manufacturing  defects  or 
other  defects  that  would  limit  their  soft  error  protection. 

If  on-chip  error  correction  is  used  in  combination  with  external  error  correction  circuitry,  then  one  mi^t 
achieve  a  significant  improvement  in  reliability  and  perhaps  reduce  or  eliminate  the  need  for  soft  error  scrub¬ 
bing. 

9.2.3  Voting  Technique 

Another  means  of  providing  memory  fault  tolerance  is  the  use  of  voting.  This  is  not  often  used  for  memoty 
arrays,  since  it  requires  a  significant  amount  of  redundancy,  but  it  can  be  effective  if  the  resources  are  avail¬ 
able. 

In  a  voting  configuration,  the  outputs  of  three  or  more  memory  arrays  are  compared  against  each  other.  If  a 
majority  of  the  outputs  are  in  agreement,  the  voter  assumes  their  values  are  correct.  The  minimum  votirig 
configuration  is  a  set  of  three  redundant  modules,  or  Triple  Modular  Redundancy  (TMR),  as  shown  in 
Figure  9-4  on  page  9-8.  The  reliability  of  a  system  using  triple  modular  redundancy  (TMR),  assuring  an 
ideal  voter,  is  equal  to  the  chance  that  all  three  modules  work,  plus  the  chance  of  two  modules  working  and 
one  failing,  or 

RsyM  =  "  2/?m(0>  [9  “  1 1] 

where 

Rjyj{t)  =  reliability  of  system  as  a  function  of  time;  and 
R„(t)  =  reliability  of  module  as  a  function  of  time. 
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Figure  9-4.  Example  of  Triple  Modular  Redundant  Memory. 


For  example,  if  we  take  the  case  of  the  memory  array  described  m  9.2.1,  “Smgle-Error  ^tcrtion  With  No 
Correction’’  on  page  9-2,  a  single  module  (simplex  system)  would  have  a  reUabihty  of  O-SJ  a  one-hour 
mission.  The  same  modules,  if  used  in  a  TMR  system,  would  provide  a  system  reliabihty  of  0.95. 


Since  a  TMR  system  relies  on  a  majority  of  the  modules  being  good,  it  is  only  effective  for  short  duration 
missions.  This  can  be  seen  when  we  compare  MTTF^  to  MTTF^^.  If  we  assume  that  the  modules  obey 
the  exponential  failure  law,  then  the  single  module  reliability  as  a  function  of  time  is  equal  to 


[9-12] 


where 


>l  =  module  failure  rate;  and 
t  —  time. 


Since 


MTTF 


fOO 

=  R{t)dt, 
■*0 


then 


MTTF^^  - 


•'o 


Using  Equations  9-1 1  and  9-12  for  a  TMR  system,  the  reliability  would  be 

Then,  MTTF^  for  the  TMR  system  would  be 


■I 


MTTF^r=\  3e-""'-2c  = 


62 


[9-13] 


[9-14] 


[9-15] 


[9-16] 
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This  compares  with  an  MTTF  of  1/A  for  a  simplex  system.  Therefore, 

MTTF,„r<MTTF^^. 

So,  the  TMR  system  is  not  suitable  for  long  life  applications  because  of  its  short  MTTF  compared  to  the 
MTTF  of  a  single  module.  It  is,  however,  useful  for  short  duration  missions  where  very  high  rehabuity  is 

required. 
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Section  10.  Conclusions 

We  conclude  that  a  significant  single  event  upset  phenomenon  exists  at  airplane  altitudes,  that  it  is  most 
likely  due  to  energetic  neutrons  created  by  cosmic  ray  interactions  within  the  atmosphere,  and  that  memory 
error  correction  coding  (ECC)  is  likely  to  be  necessary  for  most  high  density  aviomcs  memory  systems. 

We  have  demonstrated  this  by  compiling  flight  upset  data  from  more  than  1000  hours 
well  over  100  upsets.  All  flights  carried  at  least  280  64k  SRAMs  and  a  few  also  earned  84  256k  SRAMs. 
The  64k  SRAM  was  exposed  to  beams  of  neutrons  and  protons  in  the  laboratory  m  order  to  obt^  i  s 
neutron-induced  upset  cross  section.  Models  were  developed  to  conelate  the  laboratory  results  with  the 
atmospheric  neutron  environment.  The  calculated  upset  rates  are  in  very  good  agreement  with  the  me^ured 
values.  With  the  models  verified  we  were  able  to  predict  the  impact  of  SEU  on  current  and  future  aviomcs 
systems  and  to  evaluate  various  hardening  strategies. 

This  is  a  comprehensive  study.  Earlier  work  [Refs.  62.  63]  had  addressed  the  subject  in  largely  qualitative 
terms.  A  more  recent  approach  [Ref.  64]  reached  similar  conclusions  to  ours  with  regard  to  the  impart  of 
neutron-induced  SEU  on  avionics  designs,  but  based  theirs  on  very  limited  flight  upset  data  arid  supportmg 
calculations.  Nevertheless,  using  data  based  on  totaUy  different  avionics  systems,  but  which  also  contained 
SRAMs,  they  obtained  a  flight  upset  rate  within  a  factor  of  about  six  of  what  we  had  measured.  Factore 
such  as  altitude,  latitude,  and  the  SEU  sensitivity  of  specific  devices,  all  of  which  we  have  exa^ed  ui  det^, 
may  alter  the  agreement  factor  some,  but  it  still  corroborates  the  basic  phenomenon.  Havmg  developed  a 
comprehensive  approach,  we  believe  that  it  can  be  used  to  both  evaluate  present/future  aviomcs  design  con¬ 
cepts  and  analyze  flight  upset  data  from  other  systems. 
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Section  11.  Recommendations 


It  is  recommended  that  avionics  developers  consider  NSEU  phenomena  in  current  and  future  desi^s.  ^so, 
government  specifications  should  be  developed  to  guide  contractors  in  the  andysis,  prevention^  ^d  venfira- 
tion  of  NSEU  effects.  In  addition,  more  work  is  needed  to  better  quantify  the  problein.  As  this  is  a  rela¬ 
tively  new  field,  data  on  different  memory  devices,  and  eventually  logic  devices,  will  be  mvaluable  m 
understanding  and  controlling  the  problem. 


Finally,  neutrons  are  likely  to  induce  single  event  effects  other  than  upset,  m  particular,  latchup.  Hea^ 
ion-induced  latchup  has  been  a  known  and  measured  effect  in  CMOS  devices  for  many  ye^s.  Very  recently, 
however,  two  papers  were  presented  indicating  that  proton-induced  latchup  was  measured  m  a  memopr  [Ret. 
66]  and  in  a  microprocessor  [Ref.  67].  The  energies  of  the  protons  that  induced  the  atchup  ran^  from  30 
to  150  MeV.  Thus,  based  on  our  discussion  in  6.3,  “Neutron  Upset  Cross  Sections  on  page  6-11  on  e 
similarity  between  energetic  protons  and  neutrons  in  causing  single  event  effects,  we  expert  that  the  atmo¬ 
spheric  neutrons  will  also  induce  latchup  in  parts  that  are  sensitive  to  latchup  with  ions  of  very  low  LET. 
Because  latchup  is  a  potentially  more  serious  problem  than  upset  (recovery  may  require  power  cychng  or 
switching  to  redundant  hardware),  we  recommend  that  a  flight  experiment  program  be  undert^n  with  parts 
very  sensitive  to  latchup,  to  demonstrate  that  latchup  can  occur  in  flight.  Furthermore,  CMOS  p^s  with 
known  extreme  sensitivity  to  latchup  (very  low  LET  thresholds)  ought  to  be  identified  to  aviomcs  designers 

as  parts  to  avoid. 
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Appendix  A.  Flight  Data  Logs 
A.1  European  Area  1 


Table  A-1.  Flight  Log  -  European  Area  1. 

Date 

AOCP  (H) 

Fit  Hrs 
(Cum) 

SEU 

SEU 

(Cum) 

02-N0V-90 

07-NOV-90 

09-Nov-90 

13- NOV-90 

14- Nov-90 
23-NOV-90 

25- N0V-9O 

26- NOV-90 

29- N0V-9O 

30- N0V-9O 
04- Dec-90 
06- Dec-90 

14-  Dec-90 

15- Dec-90 
19-Dec-90 
08-Jan-91 

10- Jan-91 

14- Jan-91 

15- Jan-91 
17-Jan-91 

22- Jan-91 
19-Feb-91 
05- Mar-91 

23- Mar-91 
19- Apr-91 

16- May-91 

17- May-91 
07- Aug-91 
14- Aug-91 

16- Sep-91 
09-Oct-91 

11 - Oct-91 
10- Dec-91 
13-Dec-91 

17- Dec-91 


8.600 

7.870 

4.430 
5.400 
6.990 
2.630 
8.380 

8.380 
6.510 
5.660 
9.200 
8.360 
7.670 

7.380 

8.430 
5.320 

6.870 
9.210 

6.380 
3.340 
9.920 
8.940 
9.160 
4.900 
4.700 
6.500 
5.110 
8.120 
8.690 
3.050 


6.710 

6.770 


8.600 

16.470 

20.900 

26.300 

33.290 
35.920 

44.300 
52.680 
59.190 
64.850 
74.050 
82.410 
90.080 
97.460 
105.890 
111.210 
118.080 

127.290 
133.670 
137.010 
146.930 


174.630 

181.130 


206.100 

212.810 

219.580 

225.790 

231.310 

237.320 
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A.2  European  Area  2 


The  Airborne  Operational  Control  Program  (AOCP)  duration,  or  length  of  time  that  upsets  were  recorded 
on  each  flight,  was  assumed  to  be  15  minutes  shorter  than  the  actual  flight  duration. 


Table  A-2  (Page  1  of  2).  Flight  Log  -  European  Area  2. 

Date 

■  Fit  Dur 
(H/M) 

AOCP  Dur 

AOCP  (H) 

nt  Hrs 
(Cum) 

SEU 

SEU 

(Cum) 

06-Jan-91 

08:38:11 

08:23:11 

8.386 

8.386 

0 

0 

08-Mar-91 

07:57:12 

07:42:12 

7.703 

16.090 

1 

1 

12-Mar-91 

08:59:00 

08:44:00 

8.733 

24.823 

1 

2 

07-Apr-91 

07:05:00 

06:50:00 

6.833 

31.656 

2 

4 

ll-Apr-91 

08:05:00 

07:50:00 

7.833 

39.490 

2 

6 

12-Apr-91 

07:30:00 

07:15:00 

7.250 

46.740 

0 

6 

25- Apr-91 

07:11:02 

06:56:02 

6.934 

53.674 

1 

7 

17-Jun-91 

06:00:00 

05:45:00 

5.750 

59.424 

0 

7 

20-Jun-91 

07:50:00 

07:35:00 

7.583 

67.007 

3 

10 

04-Jul-91 

07:23:00 

07:08:00 

7.133 

74.140 

2 

12 

09-Jul-91 

08:09:00 

07:54:00 

7.900 

82.040 

1 

13 

lO-Jul-91 

03:00:00 

02:45:00 

2.750 

84.790 

1 

14 

16-Jul-91 

08:48:00 

08:33:00 

8.550 

93.340 

2 

16 

18-Jul-91 

08:34:00 

08:19:00 

8.317 

101.657 

1 

17 

25-Jul-91 

10:34:00 

10:19:00 

10.317 

111.974 

2 

19 

30-Jul-91 

07:12:00 

7.200 

119.174 

0 

19 

01 -Aug-91 

07:30:00 

07:15:00 

7.250 

126.424 

3 

22 

06- Aug-91 

07:02:00 

06:47:00 

6.783 

133.207 

0 

22 

08- Aug-91 

07:01:00 

06:46:00 

6.767 

139.974 

0 

22 

13- Aug-91 

07:10:00 

06:55:00 

6.917 

146.890 

0 

22 

20- Aug-91 

08:38:00 

08:23:00 

8.383 

155.274 

0 

22 

22- Aug-91 

06:46:00 

06:31:00 

6.517 

161.790 

0 

22 

26- Aug-91 

07:46:00 

07:31:00 

7.517 

169.307 

2 

24 

29- Aug-91 

07:13:00 

06:58:00 

6.967 

176.274 

0 

24 

03-Sep-91 

07:25:00 

07:10:00 

7.167 

183.440 

1 

25 

05-Sep-91 

07:15:00 

07:00:00 

7.000 

190.440 

2 

27 

09-Sep-91 

07:18:00 

07:03:00 

7.050 

197.490 

2 

29 

12-Sep-91 

06:32:00 

06:17:00 

6.283 

203.774 

0 

29 

14-Sep-91 

08:02:00 

07:47:00 

7.783 

211.557 

1 

30 

16-Sep-91 

06:44:28 

06:29:28 

6.491 

218.048 

1 

31 

19-Sep-91 

06:52:00 

06:37:00 

6.617 

224.665 

1 

32 

23-Sep-91 

07:05:00 

06:50:00 

6.833 

231.498 

1 

33 

24-Sep-91 

09:45:00 

09:30:00 

9.500 

240.998 

2 

35 

26-Sep-91 

07:50:00 

07:35:00 

7.583 

248.581 

0 

35 

30-Sep-91 

05:40:00 

05:25:00 

5.417 

253.998 

2 

37 

Ol-Ort-91 

08:17:58 

08:02:58 

8.049 

262.048 

2 

39 

02-Oct-91 

04:05:00 

03:50:00 

3.833 

265.881 

1 

40 

04-Oct-91 

05:11:00 

04:56:00 

4.933 

270.814 

1 

41 

08-Oct-91 

04:08:00 

03:53:00 

3.883 

274.698 

1 

42 

09-Oct-91 

07:10:00 

06:55:00 

6.917 

281.614 

4 

46 

14-Oct-91 

06:49:00 

06:34:00 

6.567 

288.181 

4 

50 

16-Oct-91 

06:17:00 

06:02:00 

6.033 

294.214 

1 

51 

18-Oct-91 

05:05:00 

04:50:00 

4.833 

299.048 

1 

52 

21-Oct-91 

03:03:58 

02:48:58 

2.816 

301.864 

2 

54 

l■lilll  lllIM 

imikumhh 

54 
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Date 


Fit  Dur 
(H/M) 


AOCP  Dur 


AOCP  (H) 


FltHrs 

(Cum) 


SEU 


SEU 

(Cum) 


24-Oct-91 

30-Oct-91 

07-NOV-91 

08-NOV-91 

13- NOV-91 

14- NOV-91 

15- NOV-91 
19-Nov-91 

21- NOV-91 

22- NOV-91 

26- NOV-91 

27- NOV-91 
03-Dec-91 
04-Dec-91 
lO-Dec-91 
12-Dec-91 

17- Dec-91 

18- Dec-91 
07.Jan-92 
09-Jan-92 
16-Jan-92 

21- Jan-92 

22- Jan-92 
28-Jan-92 
30-Jan-92 
03-Feb-92 
04-Feb-92 
09-Feb-92 

10- Feb-92 

11 - Feb-92 

12- Feb-92 

18- Feb-92 

19- Feb-92 
21-Feb-92 
24-Feb-92 
26-Feb-92 
03-Mar-92 


03:02:00 

02:41:00 

08:54:00 

05:57:00 

08:22:00 

01:03:00 

07:16:00 

06:54:00 

05:50:00 

04:10:09 

08:56:00 

07:20:00 

04:15:00 


02:47:00 

02:26:00 

08:39:00 

05:42:00 

08:07:00 

00:48:00 

07:01:00 

06:39:00 

05:35:00 

03:55:09 

08:41:00 

07:05:00 

04:00:00 

07:15:00 

08:55:00 

06:49:00 

08:35:00 

08:23:00 

06:06:00 

07:19:00 

05:49:00 

07:46:00 

07:30:00 

05:52:00 

08:30:00 

05:39:00 

07:53:00 

08:15:00 

04:23:00 

07:14:00 

04:45:00 

07:45:00 

06:25:00 

05:36:00 

06:22:00 

05:42:00 

04:00:00 


2.783 

2.433 

8.650 
5.700 
8.117 
0.800 
7.017 

6.650 

5.583 
3.919 
8.683 
7.083 
4.000 

7.250 
8.917 

6.817 

8.583 

8.383 
6.100 
7.317 

5.817 
7.767 

7.500 
5.867 

8.500 

5.650 
7.883 

8.250 

4.383 
7.233 

4.750 

7.750 
6.417 
5.600 
6.367 
5.700 
4.000 


310.914 

313.348 

321.998 

327.698 

335.814 

336.614 

343.631 

350.281 

355.864 

359.783 

368.467 

375.550 

379.550 
386.800 
395.717 

402.533 
411.117 

419.500 
425.600 
432.917 
438.733 

446.500 
454.000 
459.867 
468.367 
474.017 
481.900 
490.150 

494.533 
501.767 
506.517 
514.267 
520.683 
526.283 
532.650 

538.350 

542.350 


1 

0 

0 

2 

1 

0 

1 

1 

1 

0 

0 

0 

1 

0 

0 

0 

3 

0 

1 

0 

0 

1 

1 

0 

1 

1 

0 

1 

2 

2 

1 

0 

2 

2 

1 

2 

_iL 


55 

55 

55 

57 

58 

58 

59 

60 
61 
61 
61 
61 
62 
62 
62 
62 
65 

65 

66 
66 
66 

67 

68 
68 

69 

70 

70 

71 
73 

75 

76 
76 
78 
80 
81 
83 

_81. 
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ATTN:  MARK  CHRISTOPHER 

PHYSITRON  INC 

ATTN:  MARION  ROSE 

RAYTHEON  CO 

ATTN:  DDLEE 
ATTN:  JOSEPH  SURRO 

RESEARCH  TRIANGLE  INSTITUTE 
ATTN:  M  SIMONS 

ROCKWELL  INTERNATIONAL  CORP 
ATTN:  V  DE  MARTINO 

SCIENCE  APPLICATIONS  INTL  CORP 
ATTN:  DMILLWARD 
ATTN:  DAVID  LONG 

SCIENCE  APPLICATIONS  INTL  CORP 
ATTN:  WCHADSEY 

SCIENCE  APPLICATIONS  INTL  CORP 
ATTN:  PZIELIE 

SCIENTIFIC  RESEARCH  ASSOC,  INC 
ATTN:  HGRUBIN 

SUNDSTRAND  CORP 
ATTN:  C  WHITE 

SYSTRON-DONNER  CORP 

ATTN:  SECURITY  OFFICER 

TECHNOLOGY  DEVELOPMENT  ASSOCIATES 
ATTN:  RV  BENEDICT 

TELEDYNE  BROWN  ENGINEERING 
ATTN:  G  R  EZELL 
ATTN:  GR  EZELL 
ATTN:  LEWIS  T  SMITH 
ATTN:  M  P  FRENCH 

THE  RAND  CORPORATION 
ATTN:  C  CRAIN 

TRW 

ATTN:  MJ  TAYLOR 

TRW  INC 

ATTN:  TIC 

TRW  S.  I.  G. 

ATTN:  C  BLASNEK 
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TRW  SPACE  &  DEFENSE  SECTOR  VISIDYNE,  INC 

ATTN:  D  M  LAYTON  ATTN:  C  H  HUMPHREY 

ATTN:  W  P  REIDY 

UNISYS  CORPORATION-DEFENSE  SYSTEMS 
ATTN:  PMARROFFINO 


Dist-4 


